• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Inconsistency re ccSvcHost in Automatic Program Control?

I just upgraded from NIS 2009 to NIS 2010 on 2 XP Home SP2 pc’s.

On pc #1 the process ccSvcHst.exe, which of course is a key component of NIS, showed up immediately on the automatic program control list as Symantec Service Framework, along with two or three other programs   But on pc #2 ccSvcHst has not shown up at all.  I don’t think ccSvcHost ever appeared on either pc’s program control list with NIS 2009.

Any ideas on why I would see such a discrepancy, and if so which result is more normal?  And does it matter?  Everything seems to be working fine with both installations.  Thanks.

Replies

Kudos0

Re: Inconsistency re ccSvcHost in Automatic Program Control?

Anyone?

While an explanation would be nice, the main thing I'd like to know is simply whether anyone else using Automatic Program Control (preferably on XP) has Symantec Service Framework (ccSvcHst.exe) showing up in their NIS 2010 firewall program list.

If not, or if no repsonses are forthcoming, I'll probably delete it from the list since (1) it only appears on one of my pc's; (2) it wasn't on either pc's list with NIS 2009, and (3) I assume NIS can simply re-add it if needed.

Thanks.

Kudos2 Stats

Re: Inconsistency re ccSvcHost in Automatic Program Control?

Hello Ardmore,

I cannot offer an explanation to your question, but I can give you my own observations.

1-XP machine running NIS 2010 does have Symantec Service Framework (ccSvcHst.exe) listed in Program Control.

1-XP machine running NIS 2010 does not have this entry.

1-XP machine running Norton 360 v4 Beta does not have this entry.

I shall try to get some more information on this.

"Anyone who isn't confused really doesn't understand the situation."   Edward R. Murrow
Kudos1 Stats

Re: Inconsistency re ccSvcHost in Automatic Program Control?

How is PC#1 connected to the internet and / or connecting to PC#2 ?  Are they both connecting exactly the same?  Is one of them wired to the router and the other one wireless to the router (for example)?  Is PC#1 connecting to PC#2 to either access Shared Folders or using a shared internet connection?  Is Remote Monitoring set up on any of the PC ( Network Security Map > Remote Monitoring )?

Sorry for all the questions but the ccSvcHst would only show up in the Smart Firewall program list if it was using the network connection (or monitoring the PC's connection for a file share or printer share).  Is there any different programs running on the two systems?

Win10 x64; Proud graduate of GeeksToGo
Kudos0

Re: Inconsistency re ccSvcHost in Automatic Program Control?


dbrisendine wrote:

How is PC#1 connected to the internet and / or connecting to PC#2 ?  Are they both connecting exactly the same?  Is one of them wired to the router and the other one wireless to the router (for example)?  Is PC#1 connecting to PC#2 to either access Shared Folders or using a shared internet connection?  Is Remote Monitoring set up on any of the PC ( Network Security Map > Remote Monitoring )?

Sorry for all the questions but the ccSvcHst would only show up in the Smart Firewall program list if it was using the network connection (or monitoring the PC's connection for a file share or printer share).  Is there any different programs running on the two systems?


Both pc's use the same wireless router.  There is no connection or folder sharing of any kind between them, and Remote Monitoring is not set up.  I'm not very knowledgable with networking, but I do know that nothing had changed network-wise (at least not on purpose) when I upgraded from NIS 2009 to 2010.  I upgraded pc #1 (the one that ended up with ccSvcHost in program control) one day, and then pc #2 the next.  The only difference is that the auto-version discovery failed on pc #1, so I stopped and clicked on a Subscription Status link in the bottom right hand corner of the NIS 2009 main screen that led to a Norton Downloader after a series of questions.  This is then how I then upgraded pc #2 as well.

Pc #1 is a secondary machine.  Its program set is basically a subset of those on pc #2.

Do you agree that if I delete ccSvcHst from the program control list on pc #1, NIS will automatically re-add it if it's actually needed for some reason?  Or would you need further info before answering that?  Thanks.

Message Edited by Ardmore on 11-07-2009 11:43 PM
Kudos0

Re: Inconsistency re ccSvcHost in Automatic Program Control?

The plot thickens.

All three computers are hard wired into the router.

I reconfigured two computers running NIS 2010.

#1 - XP with NIS 2010 - originally had Symantec Service Framework (ccSvcHst.exe) listed in Program Control.

#2 - XP with NIS 2010 - originally did not have the entry in Program Control.

I successfully set up file and printer sharing on computers #1 & #2. I also set them both up for Remote Monitoring and could view the Device Details of each machine.

After this configuration, still only computer #1 has Symantec Service Framework (ccSvcHst.exe) listed in Program Control.

Computer #2 does not have the entry.

"Anyone who isn't confused really doesn't understand the situation."   Edward R. Murrow
Kudos0

Re: Inconsistency re ccSvcHost in Automatic Program Control?

Interesting...

This is probably irrelevant, but I'll throw it out there on the small chance it might shed any light:

On pc #2, the one without the Symantec Service Framework (ccSvcHst.exe) entry in program control, I see the following in the log from just about the time I finished the upgrade:

Firewall Activities - Info

Rule "Default Block Windows File Sharing" blocked communication.  Local addess 198.x.x.x ( Port (139) ).

Process name is C:\Program Files\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe."  I've certainly seen "Block Window File Sharing" in the log before, but don't recall ever seeing it refer to ccSvcHost before (of course, I don't look at the logs all that often).

Anyway, this happened at the same time that I briefly lost internet connectivity, if I understand what the XP Event Viewer is telling me (failed to renew network address from DHCP server because operation was cancelled by the user). At the same time, the NIS firewall log shows one of those "ccSvcHst.exe is preparing to access the internet" messages that appear whenever NIS is starting up.

Won't have access to pc #1 again until tomorrow to see if its log has similar entries...not that any of this is likely to be germane to the issue... 

Message Edited by Ardmore on 11-08-2009 02:36 AM
Kudos0

Re: Inconsistency re ccSvcHost in Automatic Program Control?

OK, I now have access to pc #1 again, and I see that NIS Program Control's creation of a rule allowing Symantec Service Framewok (ccSvcHst.exe) is the VERY FIRST ENTRY OF ANY KIND in the new Security History Log that started when I upgraded to NIS 2010 three days ago.  It says:

Severity: Info
Activity: You allowed Symantec Service Framework to access your network resources.
Date & Time:  Wednesday, Nov 4, 2009 8:02 PM
Status: Allowed
Recommended Action: No action required
Program Path: C:Program Files\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe
Default Action: No action required
Action Taken: Allow
Local computer: 127.0.0.1, 1029
Traffic Description:  Inbound TCP, Port 1029

Since the program rule for ccSvcHst.exe was my very first log entry on pc #1 after upgrading from NIS 2009 to 2010, but never occurred at all on pc #2, I wonder if some subtle difference in how the installation is initiated can determine whether or not the rule creation is triggered?

This thread is closed from further comment. Please visit the forum to start a new thread.