yea scanned with norton and found 3 files

gator.exe
gmt.exe
gmt.dll
and I deleted them successfully

but its still doing it , I havent restarted yet but I think maybe i'll try uninstalling it and reinstalling,

well now it's not explore.exe or svchost.exe those have stopped

now its ccproxy.EXE and Lucomserver.EXE
path: \program files\symantec\liveupdate\
and I have updated everything(wierd)

it keeps showing the alert but I have gone thru all the settings and it says "permit all"
for those items - I have looked all over for the alert settings and I have set it to not alert me on those connections but it still does? So I'll try the reinstall thing then I"ll get back....