hey Spyder32, Nokia and SDK thanks for replying, but as far as the update policy of Symantec goes i dont think it needs to connect to my Yahoo messanger (Ypager.exe) and Msn Messager. the IP i am talking about continiously tried to connect to above application and also tries to connect to iexplorer.exe. the strange part when i blocked the connection i used to get alerts one every 3 minuts, now when i have authorised the connection but still i conf. my firewall to creat an security alert there is no ALERT. "ALTHOUGH THERE IS AN ACTIVE (ESTABLISHED) CONNECTION FROM THAT IP ON PORT 9027". Ill keep you updated. I'll capture data and if permitted ill put it on the site. please let me know if i can.