Using common programs is becoming very interesting:
Symantec i presume is spying their Norton System Works 2003 pro,
but i think all products and
i have some feeling that was new live reg and live update...
for example
nav32 that while before right click scanning frequently and persistent
connects to
12.158.80.10 port 80
64.94.110.10-12 port 80
only bites but... if you have static ip adress...
be aware if you are not sure from where your inst... come from...
(big brother is watching)
and you do not use well configured firewall
same thing ive ecountered with Alcohol 120 percent trial version
its connecting to taiwan ip of it s producer
dns.msws.idv.tw [211.21.98.2], port http [80]
PS
i hope this topic will not be considered as illegal