Norton says app on my PC trying to by accessed form the Internet, but it's my PC trying to access the app

Starting with the latest Norton update I periodically receive the message below about activity on my own PC, not the Internet. Any ideas why Norton is concerned about this? The 192.168.1.234 IP is assigned to my PC.

Norton v24 is notifying & asking what you want to do about CyberLink PowerDVD12 executable generating traffic.
Note: Revoked Certificate | Unknown

CyberLink PowerDVD 12 may be OEM bundled pre-installed trialware.

CyberLink PowerDVD 12: What It Is & Should I Remove It?
https://malwaretips.com/blogs/cyberlink-powerdvd-12-what-it-is-should-i-remove-it/

Note: PowerDVD Version 12 - Release 2018-04-22 | Latest patch 2018-04-22
https://en.wikipedia.org/wiki/PowerDVD

1 Like

The larger question is what OS is being used? This is old 32 bit software that shouldn’t be compatible with but a handful of older Windows versions. The retail versions on version 12 support Windows 8/8.1, 7, Vista and XP SP3

SA

I’m confused by the message. It says my PC is trying to connect to the Cyberlink software. The message does not say Cyberlink is generating traffic. Am I just not understanding the message?

Win10 Home 22H2

Norton prompt feels like CyberLink is trying to communicate with CyberLink mothership.
Trying to call home, check for an update…find out whether it’s still installed…aka generating traffic. What do you want to do about this traffic? Do you want to Allow or Block connection/communication/traffic with CyberLink mothership.

Do you run CyberLink PowerDVD12?
Note: Revoked Certificate | Unknown
Note: CyberLink PowerDVD12 - Latest patch 2018-04-22

Two questions still unanswered:

  • Do you have CyberLink PowerDVD 12 installed?
  • What operating system are you using? Asking this because this software is VERY OLD. Outside entities could be trying to exploit it.

SA

I do have CyberLink PowerDVD 12 installed
Win 10 Home 22H2

Why does the message say the IP of my PC is trying to connect to the software? It makes sense the software is trying to phone home, but in that case, I would expect the message to say the EXE is trying to connect to an external IP.

Do you run CyberLink PowerDVD 12?
Note: Revoked Certificate | Unknown
Note: CyberLink PowerDVD12 - Latest patch 2018-04-22

png_21194

============================================

We’d love your feedback! [here ]
Product Suggestions [here]
Norton support via Social Support | Chat | Phone [here ]

image

Would be a much better message if it said the application on the PC is trying to connect to x.x.x.x or domain[.]com

Do you run CyberLink PowerDVD 12?
Note: Revoked Certificate | Unknown
Note: CyberLink PowerDVD12 - Latest patch 2018-04-22

As most apps do these days, they will be checking for updates every so often. That would be why it is trying to access the mothership. The newest version of Norton is just being more vigilant about what it is reporting.

1 Like

Yes, CyberLink PowerDVD12 is installed on the PC.

Okay…CyberLink PowerDVD12 is installed.
Q: do you use CyberLink PowerDVD 12?

I don’t use CyberLink and will uninstall it.

My primary question is why the message says the IP assigned to the PC is trying to connect to CyberLink. Assuming the software is phoning home, seems like it would be better to state that CyberLink is trying to connect to an external IP or an external IP is trying to connect to CyberLink.

  1. thanks

png_21257

192.168.1.234 is your local network
192.168.1.234 is trying to connect to CLMSServerPDVD12.exe

192.168 IP address is a very common type of IP address used for local networks, like the ones you have at home or in small offices.

The genuine CLMSServerPDVD12.exe file is a software component of CyberLink PowerDVD by CyberLink. Cyberlink PowerDVD is a media playback application.

png_21257

Your local home network is trying to connect to a software component of CyberLink PowerDVD.

CyberLink on your machine is trying to call home via your home network.
Do you want to Allow | Block traffic?