Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Can someone identify this connection on startup? (ccapp.exe)

0 views
Skip to first unread message

Bill W.

unread,
Jun 5, 2003, 2:44:14 PM6/5/03
to
For no apparent reason, my symantec common client ap(ccapp.exe) is
making a connection to crl.verisign.com:80 on each system boot.
At first, I figured that ccapp was catching an outbound connection on
port 80,as if it were monitoring the http port, but I thought it only
watched pop3 and smtp ports.
I even tried to disable ccapp on startup to see if the firewall would
catch a different app instead, but then the connection was no longer
attempted.
This connection just started to exist, and I would really like to know
what it is for, so I can disable it instead of just block it.
Help would be appreciated, Tnx.

Peter Van Epp

unread,
Jun 5, 2003, 3:12:24 PM6/5/03
to
weba...@yahoo.com (Bill W.) writes:

>For no apparent reason, my symantec common client ap(ccapp.exe) is
>making a connection to crl.verisign.com:80 on each system boot.

One expects given the name c(ertificate) r(evocation) l(ist)@ a
certificate authority company, that you perhaps don't want to block this
access. It is likely (and unusually) checking that the certificate the symantec
application is using is actually valid (as opposed to being valid sometime in
the past before being compromised and therefore revoced by the issuing CA)
which is a highly desirable thing in most cases.

DougNews

unread,
Jun 5, 2003, 4:22:17 PM6/5/03
to
From Symantec:
-----------------------------------
Symantec has implemented a product activation requirement for Norton
AntiVirus 2003 version, this means that Norton AntiVirus 2003 will include a
product activation technology.

Product activation, implemented through the Digital Rights Management (DRM)
feature, is an anti-piracy technology designed to verify that Symantec's
software products have been legitimately licensed.

Symantec applications check for digital signatures on its modules before
allowing them to run. Norton AntiVirus does this by using windows APIs,
which in turn uses verisign website to check the signature.

By default Windows APIs connects to crl.brun3.verisign.com website to
confirm the validity of our digital signatures. Contacting
crl.brun3.verisign.com website is normal, there is no need to worry
regarding this
---------------------------------------------------------------------


"Bill W." <weba...@yahoo.com> wrote in message
news:e6f3d3da.03060...@posting.google.com...

*** **

unread,
Jun 5, 2003, 4:41:22 PM6/5/03
to
FadedG,

I posted my concerns about NAV 2003 and its DRM in a couple of other groups,
but I have gotten no one to respond. Apparently no interest about it even in
the antivirus newsgroup. By the way, I only allow CCAP.exe to utilize ports
110 and 25 (email) because that's what it's supposed to be doing, monitoring
for incoming and outgoing email.

Here's my post to another group regarding DRM (XtreamLok):

Anybody have any information on Symantec's use of XtreamLok anti-piracy
software for its "Digital Rights Management" scheme beginning with NAV 2003
(downloadable version). I recently upgraded to NAV 2003 (from 2002 - the
virus def subscription was almost as much as the complete new software, so
why not, I thought) only to find that the "upgrade" consisted primarily of
loading more programs in the background, one of which was XL.EXE. I couldn't
find much on the executable other than it was provided by a company named
XtreamLok which provides software makers with DRM solutions.

The process can't be unloaded because it is called up each time CCAPP. exe
runs (CCAPP.exe is the new process which monitors connections to email
ports). I found one news source which stated that the "pilot" DRM program
launched by Symantec would be first imposed on purchasers of the
downloadable version of NAV and would later be implemented in its boxed
versions. http://www.extremetech.com/article2/0,3973,1009112,00.asp

I'm increasingly unwilling to accept all of these "extras" being placed on
my PC by software makers, especially without acknowledgment of the maker as
to what the DRM scheme does (i.e. what is loaded, what are the
processor/memory requirements, does it contact the maker via internet, does
it stay on the PC when the main software package is uninstalled, what
happens if the software is moved to another PC or the PC configuration is
changed, etc.). I can obtain most of the information, but it's usually only
after having loaded that software that I am aware of the need to look for
such information.

I've never had problems with any version of NAV going back several years,
but my loyalty has been diminished by this and a few other factors, namely
my heightened perceptiion that there are a good number of quality
alternatives. Any thoughts on these ... AVG, NOD32, Avast, Kaspersky, Panda,
others?
Free or commercial doesn't matter, but I generally would be attracted to the
commercial version if a maker has both a free and commercial product,
primarily because I prefer more features than less to a point. My biggest
concern about these alternatives has always been whether a smaller company
could compete with a larger company like Symantec in keeping their software
a quality, up-to-date product. How does a smaller company like Grisoft, for
example, have the money to constantly keep its virus defs as current as
Symantec does? It seems that this would be a very expensive research
endeavor, and can we be sure that a smaller company, even if it releases
frequent updates, is including everything that shoud be? I know there is no
guarantee even with Symantec, but all things being equal, it seems funding
can help to provide better virus definitions.

Anyway, my initial desire to post this came from once again finding an
unidentified process on my PC. Maybe it was an over-reaction (what do you
think?), but it definitely got me thinking more about switching to something
else.

Any thoughts are appreciated.

Thanks for reading.

"FadedGlory" <ITEDDJ...@spammotel.com> wrote in message
news:Xns93919B829...@130.133.1.4...
> weba...@yahoo.com (Bill W.) wrote in
> news:e6f3d3da.03060...@posting.google.com:

> I run NPF and NAV 2002 and I have bought NIS 2003. I have been reading
> that Symantec now has DRM garbage included? Does anyone know if this is
> true? Is this ccapp.exe DRM? I see no reason for a virus checker or a
> firewall to access Verisign.com for any reason what so ever.
>
> The way things stand at this point, I will not be installing NIS 2003,
nor
> will I ever buy another Symantec program ever again.
>
> Thanks for any information anyone can give me!!
>
>
> --
> FadedGlory


Tom J

unread,
Jun 5, 2003, 10:01:33 PM6/5/03
to

"*** **" <***@***.com> wrote in message
news:SVNDa.55$Fq5.7...@newssvr15.news.prodigy.com...

> FadedG,
>
> I posted my concerns about NAV 2003 and its DRM in a couple of other groups,
> but I have gotten no one to respond. Apparently no interest about it even in
> the antivirus newsgroup.

There is no virus involved. As of the 1st of the year I have ordered my last
software from Symantec, including TurboTax, that I have used for years. If
they are going to load 3 programs on your computer to use 1 program, they
should tell you in advance.

Tom J


FadedGlory

unread,
Jun 6, 2003, 12:10:03 AM6/6/03
to
"*** **" <***@***.com> wrote in
news:SVNDa.55$Fq5.7...@newssvr15.news.prodigy.com:

> FadedG,
>
> I posted my concerns about NAV 2003 and its DRM in a couple of other
> groups, but I have gotten no one to respond. Apparently no interest
> about it even in the antivirus newsgroup. By the way, I only allow
> CCAP.exe to utilize ports 110 and 25 (email) because that's what it's
> supposed to be doing, monitoring for incoming and outgoing email.
>
> Here's my post to another group regarding DRM (XtreamLok):
>
> Anybody have any information on Symantec's use of XtreamLok
> anti-piracy software for its "Digital Rights Management" scheme
> beginning with NAV 2003 (downloadable version). I recently upgraded to
> NAV 2003 (from 2002 - the virus def subscription was almost as much as
> the complete new software, so why not, I thought) only to find that
> the "upgrade" consisted primarily of loading more programs in the
> background, one of which was XL.EXE. I couldn't find much on the
> executable other than it was provided by a company named XtreamLok
> which provides software makers with DRM solutions.
>
> The process can't be unloaded because it is called up each time CCAPP.
> exe runs (CCAPP.exe is the new process which monitors connections to
> email ports). I found one news source which stated that the "pilot"
> DRM program launched by Symantec would be first imposed on purchasers
> of the downloadable version of NAV and would later be implemented in
> its boxed versions.
> http://www.extremetech.com/article2/0,3973,1009112,00.asp
>
>

<clipped>

Thank you, I think you have answered my question "Symantec's use of
XtreamLok anti-piracy software for its "Digital Rights Management" That is
all I needed to know.. My husband will no longer buy Turbo Tax and even
though I did buy NIS2003, I will not install it or ever buy another thing
from Symantec.. I am just one drop,,but sooner or later one after another
drop will fill a bucket..:) I will help fill the bucket if I can..


0 new messages