Well, this is my first post. I'm Shane - the taker of the aforementioned screencaps.

To answer questions asked here & pmbd, the alerts came up both while installing, launching and running the program.

-On installation the program adds itself to the startup registry without asking permission. This means by default it will try to launch every time Windows does. (I didn't screencap this 'alert')

-When launching the program, the  "Attempts to communicate with the internet" alert popped up. This is so the program can show you the latest subscriber downloads available on TSR, as well as offer you 30% off a subscription. This connection between the workshop and TSR is always open, the program launches with Windows if you remember.

Screencap of this: http://i273.photobucket.com/albums/jj211/ShanOw0/tsrtool.jpg

- When using the various 'features' or saving a file using the tool, the program library injection alert popped up.