Re: Symantec CCAPP connects to strange addresses
From: Genady (genady@geocities.com)
Date: 03/27/03
- Next message: Steve: "Re: Please Help Security issue"
- Previous message: Genady: "Re: Symantec CCAPP connects to strange addresses"
- In reply to: siljaline: "Re: Symantec CCAPP connects to strange addresses"
- Next in thread: Ming Jin: "Re: Symantec CCAPP connects to strange addresses"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: genady@geocities.com (Genady) Date: 27 Mar 2003 12:59:58 -0800
I know what this process is.
The point is that for whatever it is doing it should not connect
to any IP addresses that do not belong to my mail server.
Btw, this is the "whois" info on them:
inetnum: 194.255.6.0 - 194.255.6.255
netname: KJAERGAARD-EL-DK
descr: Kjaergaard-el A/S
country: DK
admin-c: LPL22-RIPE
tech-c: LPL22-RIPE
status: ASSIGNED PA
mnt-by: TELIANET-LIR
notify: mntripe@telia.net
changed: jessica@telia.net 20020627
source: RIPE
inetnum: 144.122.0.0 - 144.122.255.255
netname: METU-NET
descr: Middle East Technical University(METU)
descr: Computer Center
descr: Ankara
country: TR
admin-c: MH4497-RIPE
tech-c: MH4497-RIPE
status: ASSIGNED PI
mnt-by: AS1967-MNT
changed: hostmaster@metu.edu.tr 20020301
source: RIPE
does it tell anybody anything?
Genady
siljaline <siljaline@invalid.com> wrote in message news:<jldp7v4bcscpcoo2p3k9sb2oq1a1rrvppq@4ax.com>...
> On 22 Mar 2003 05:09:20 -0800, genady@geocities.com (Genady) wrote:
>
> >Hello,
> >
> >I have installed Symantec Systemworks on my computer
> >and I use its email protection system. It uses the "CCAPP"
> >application to actually connect to the POP3 servers.
> >
> >For some reason, my firewall shows that the application tries
> >to connect to some addresses which are not my mail servers.
> >In particular it connects to the following addresses
> >194.255.6.68:110,
> >144.122.12.18:110
> >(and there is another address, something like "no.ip.yet.demon.co.uk")
> >
> >These two addresses seem to listen on port 110, but they don't run POP3
> >protocols. I could not figure out what protocol it is.
> >
> >Does anybody know anything about this behaviour of CCAPP ?
> >Does it look like a virus or some king of spyware?
> >
> >Genady
>
> http://www.answersthatwork.com/Tasklist_pages/tasklist_c.htm
>
> ><snip>
> "ccApp.exe"
>
> Symantec?s Common Client Application for Norton AntiVirus 2003, Norton Personal
> Firewall 2003, and Norton Internet Security 2003. This task is, effectively,
> the "master" task in these products as its role is to call the different program
> features of the above products. For example, if Auto-Protect and E-mail
> Scanning are enabled, then CCAPP makes sure that those programs are running. If
> CCAPP is disabled, then Auto-Protect and Email Scanning will not run.
>
> ></snip>
>
> HTH
- Next message: Steve: "Re: Please Help Security issue"
- Previous message: Genady: "Re: Symantec CCAPP connects to strange addresses"
- In reply to: siljaline: "Re: Symantec CCAPP connects to strange addresses"
- Next in thread: Ming Jin: "Re: Symantec CCAPP connects to strange addresses"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|