CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

ccapp.exe?

 
Post new topic   Reply to topic       All -> FavForums -> Norton Anti-Virus [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Guest - Simon

Guest
IP: 134.159.*.*






PostPosted: Fri Jul 07, 2006 10:41 am    Post subject: ccapp.exe?
Reply with quote

Question: How many versions of ccapp.exe should I have with Norton SystemWorks 2005 enabled for automatic updating?

Background: I have two versions of this file on my computer. One is ccApp.exe and is located in c:/Program Files/Symantec/DownloadManager/NSW2005/Support/ccCommon/ccCommon, and CCAPP.EXE (all in caps) located in c:/Program Files/Common Files/Symantec Shared both 58K in size. The first one says it was modified 17/2/2006 and the second one was modified 13/12/2004. My feeling is the first one has been corrupted somehow by these viruses, but I don't know which directory this file should be in or how many there should really be to take any action.

I'm trying to make sense of two spybot entries I have:

"Current filename: "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

Database status: Regular entry
Value: ccApp
Filename: ccApp.exe

Description
Part of _ Norton AntiVirus 2003_. Auto-protect and E-mail check will not function without this

Source: Paul Collins Startup list
____________________

Current filename: "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

Database status: Not required - virus, spyware, malware or other resource hog
Value: ccApp
Filename: [random filename]

Description
Added by the _OBSORB_ TROJAN! Note the random filename compared to the valid Norton AntiVirus

Source: Paul Collins Startup list
____________________

Current filename: "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

Database status: Not required - virus, spyware, malware or other resource hog
Value: ccApp
Filename: WMADZ.EXE

Description
Added by the _RBOT-LJ_ WORM!

Source: Paul Collins Startup list"


All virus scans I do come up clean.

Regards,

Simon

Back to top
Cudni

Special Response Team


Joined: Dec 10, 2002
Posts: 3710
Location: Et In Arcadia ego
MIRT MVP SRT

PostPosted: Fri Jul 07, 2006 3:48 pm    Post subject:
Reply with quote

use few more tools to double check
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview

Cudni


_________________
Hecho en Mexico
Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Norton Anti-Virus All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer