Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Sav Emailing Brazil?

  • Please log in to reply
2 replies to this topic

#1 nixie21


  • Members
  • 39 posts
  • Local time:10:24 AM

Posted 02 January 2006 - 07:02 PM

The last couple of days, zonealarm is alerting me that ccapp is trying to transmit email to an ip in brazil

Msg =

email client program

Symantec User session is trying to transmit emails
destination =

I have scanned with SAV, a squared, trojan hunter, ewido, msas, kavrapsky online all clean......
hijackthis also looks clean....


BC AdBot (Login to Remove)


#2 jgweed


  • Members
  • 28,473 posts
  • Gender:Male
  • Location:Chicago, Il.
  • Local time:09:24 AM

Posted 02 January 2006 - 07:18 PM

As I understand it, ccapp.exe is a legitimate process belong to Norton AV; it is also a process attached to fastclick adware that might be attempting to send usage information to its company servers, some of which could easily be in Brazil.
The BC start up database lists 4 entries for ccapp. exe, three of which are additional problems involving worms or trojan backdoors. I would suggest you start there.
Whereof one cannot speak, thereof one should be silent.

#3 nixie21

  • Topic Starter

  • Members
  • 39 posts
  • Local time:10:24 AM

Posted 02 January 2006 - 07:42 PM

Thanks, it all looks clean to me. One instance of ccapp, in the correct symantec folder and all the scans come back clean.... I will look at the database!

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users