home

ccSvcHst.exe

Symantec Security Technologies

Symantec Corporation

It runs as a separate (within the context of its own process) windows Service named “Norton Security Suite”. This is installed with multiple programs including Norton Internet Security and Norton AntiVirus.
Publisher:
Symantec Corporation  (signed and verified)

Product:
Symantec Security Technologies

Description:
Symantec Service Framework

Version:
10.1.1.16

MD5:
e78a365cc3e0fbfc018a33dce01909f8

SHA-1:
971ea3fe24b3fe5f3b695ba3d482121ad8c86325

SHA-256:
0a414bdd8f8fb4ba493b8fbe9eb63377d9bb0a6800c55b2e3500913cf0f96ac6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 7:16:36 AM UTC  (today)

File size:
127 KB (130,008 bytes)

Product version:
10.1.1.16

Copyright:
Copyright (c) 2011 Symantec Corporation. All rights reserved.

Original file name:
ccSvcHst.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\norton security suite\engine\5.2.2.3\ccsvchst.exe

Digital Signature
Signed by:
Symantec Corporation

Authority:
VeriSign, Inc.

Valid from:
12/6/2010 6:00:00 PM

Valid to:
12/6/2011 5:59:59 PM

Subject:
CN=Symantec Corporation, OU=Symantec Research Labs, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Symantec Corporation, L=Santa Monica, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
761E6D392C832CDB98C05A6CED1F138A

File PE Metadata
Compilation timestamp:
4/16/2011 5:30:43 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:zLYddUdi05pzbL+ksXNX1Iueo+BjOeAgau8NIicruvaSs:li6bikuFDoOeAgYIj8s

Entry address:
0x1009C

Entry point:
E8, D7, 03, 00, 00, E9, 37, FD, FF, FF, CC, CC, 68, 01, 01, 41, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 30, 71, 41, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, FF, 55, 8B, EC, FF, 75, 14, FF, 75, 10, FF, 75, 0C, FF, 75, 08, 68, 72, FA, 40, 00, 68, 30, 71, 41, 00...
 
[+]

Entropy:
6.4430

Code size:
64.5 KB (66,048 bytes)

4 Services
Display name:
Norton Security Suite

Service name:
N360

Type:
Win32OwnProcess

Display name:
Norton AntiVirus

Service name:
NAV

Type:
Win32OwnProcess

Display name:
Norton Internet Security

Service name:
NIS

Type:
Win32OwnProcess

Display name:
Norton 360

Service name:
N360

Type:
Win32OwnProcess


The file ccSvcHst.exe has been discovered within the following programs.

Norton 360  by Symantec Corporation
Norton 360, developed by Symantec, is marketed as an "all-in-one" computer security suite. The package includes an antivirus, a personal firewall, a phishing protection program and a backup program.
www.symantec.com/techsupp
12% remove it
Norton AntiVirus  by Symantec Corporation
Publisher's description - “Basic antivirus protection that stops viruses and spyware, so you can safely go online and share. Five patented layers of protection quickly and accurately detect and eliminate viruses and spyware.”
us.norton.com/antivirus
1% remove it
Norton AntiVirus Classic  by Symantec Corporation
Norton AntiVirus 2009 Classic does not include spyware or adware detection. The Classic edition is marketed alongside Norton AntiVirus 2009, which does include spyware and adware detection. Two variations on Norton AntiVirus 2009 are also marketed by Symantec.
8% remove it
Norton Internet Security  by Symantec Corporation
Norton Internet Security, developed by Symantec Corporation, is a computer program that provides malware prevention and removal during subscription period and uses signatures and heuristics to identify viruses.
3% remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.