ndetect.exe and zone alarm alerts

jdesante · Joined: 29 May 2006 Posts: 1

I am running zone alarm Pro for firewall and Norton system works for anti-virus.
I have been monitoring the alerts & logs in zone alarm and I have noticed lately that NDETECT.EXE. has been trying to connect with the internet but they have been blocked.
The weird thing is that the destination IP addresses are mostly different even though the entry detail for the description is always "Symantic NetDetect was block from sending data to the internet (at some differernt address)"
I did check out the addresses and most are web sites i have been to at some time but some are not.
It seems to me that ndetect.exe is being used by another program to send info to their server while at the same time it is sending data to Symantic.
Is this normal, spyware or what??

Thanks for any help

GTO · Joined: 15 Nov 2005 Posts: 1519

Hi, jdesante. Welcome to the 2-Spyware.com forums!

The ndetect.exe file is a legitimate vital component of the Symantec software. It is required to perform automatic updates of installed Symantec programs. The ndetect.exe connects to various Symantec's web servers and some other hosts in order to verify an Internet connection. You should allow this process to run. Such activity is normal. Do not block or disable it, unless you do not need live updates and update your software manually.