Re: ccApp.exe - security risks?

Even having worked a career in computers, I'm not in a good position to confirm, deny or argue what, exactly, the situation is with this appl - ccApp.exe.

Despite the lack of good position, I do continue to accumulate clues. Here are some clues found recently. The first are some cutNpasted pieces of a dialogue from a web site found at - http://forums.spywareinfo.com/lofiversion/index.php/t45032.html


"Basically if there's a copy of ccApp.exe elsewhere than in the symantec directories, it's probably a worm. It should especially not be in
the c:\windows or c:\windows\system32 directories.

Shalom
--------

"(Shalom) Thanks for the reply. I did a search for the ccApp.exe, but it was in the C:\Program Files\Common Files\Symantec Shared folder where it's supposed to be"
-----------------

Using the info I previously posted on this topic, there was a fairly involved process of troublehshooting I did. Along the way I found that my computer had one copy of ccApp.exe, and it was in fact located in Shared directory of my Symantec folder..... this was before I began the process of un-installing the corrupted version of older (2003) Norton Firewall & Antivirus. After all this was un-installed, and before installing a newer (2006) version, I did some more investigating. I found that I still had only one copy of ccApp.exe, but now it's full name/path had changed ( the full new name is/was CCAPP.EXE-10E11A7C.pf) except that it had been moved into my Windows/Prefetch directory, the file properties indicated "unknown application", and bore no verifiable signatures of authenticity. In this new form, the file was not the same size it had been when I found it in the Symantec folder. Based on the dialogue above from "Shalom" , it occured to me that this file should not be in some place like my Windows folder (where Prefetch is)..... so I thought maybe I had discovered a worm. I deleted this file and have not yet suffered any ill consequences that I have been able to observe. I then proceeded with installing the new Norton products, the install seemed to go okay, got all the updates downloaded, my computer once again appears (possibly operative word) to be secure..... strangely enough, though, I'm now seeing a more frequent (annoyance) problem with ccApp.exe being hung each time I request a reboot/restart..... ? This had only been an infrequent problem with the older 2003 Norton product.... at least up until the time (2 days ago) that something happened to cause all my 2003 norton stuff to disappear. Here I am 2 days later, still scratching my head trying to piece it all together.... and this even includes a successful event of having called Symantec Support on the phone.... and I actually got through to and spoke to what I imagine was a real live person (Jugdish.... no joke) who spoke somewhat reasonably good english, but was unable (or more likely unwilling, I suspect) to tell me anything about a known problem with ccApp.exe


Note: now that I've gotten the new 2006 software installed, I checked and found that there is once again a single copy of ccApp.exe in the Symantec/Shared folder. File Properties incidates it has an approved Symantec Security Signature, and even includes a lot of info about the version and history of this file. When this problem first started 2 days ago, it did not occur to me to check the same Properties of the version of file present at that time.

Tweet