The last couple of days, zonealarm is alerting me that ccapp is trying to transmit email to an ip in brazil
ANY IDEAS???

Msg =

email client program

Symantec User session is trying to transmit emails
ccapp.exe
destination = 200.195.88.163:SMTP

I have scanned with SAV, a squared, trojan hunter, ewido, msas, kavrapsky online all clean......
hijackthis also looks clean....

THANKS SO MUCH!

As I understand it, ccapp.exe is a legitimate process belong to Norton AV; it is also a process attached to fastclick adware that might be attempting to send usage information to its company servers, some of which could easily be in Brazil.
The BC start up database lists 4 entries for ccapp. exe, three of which are additional problems involving worms or trojan backdoors. I would suggest you start there.
Regards,
John

Thanks, it all looks clean to me. One instance of ccapp, in the correct symantec folder and all the scans come back clean.... I will look at the database!