Note: With the Symantec Scan Engine service stopped, you should see no responses on either port 8004 or 8005
Start the Symantec Scan Engine service.
In a cmd window, type: netstat –an | find “800”
Note: After starting the service, netstat should continue to not report traffic on either TCP/8005 or TCP/8005. If you fail to clear the browser cache and the Java cache within the client machine, the browser may render the Scan Engine UI from a local cached copy on the client machine when the Symantec Scan Engine service no longer responds to TCP SYN on either TCP/8004 or TCP/8005.
To revert changes
In a cmd window, navigate to the folder which contains the symcscan.exe executable, the xmlmodifier.jar and configuration.xml files. This is the installation location for Scan Engine.