1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Question about Port scan & hijack log

Discussion in 'Virus & Other Malware Removal' started by digital_stor, Jan 30, 2005.

Thread Status:
Not open for further replies.
  1. digital_stor

    digital_stor Thread Starter

    Joined:
    Nov 10, 2004
    Messages:
    36
    Hello

    I'm using Panda antivirus ant recently I got a popup message (from Panda antivirus) that said that Panda A. had stopped a portscanning from outer source....?
    What is that?

    I have also found a couple of maps in C:/ that is named as Found.000, Found.001, Found.002 etc. Every of those mapps has atleast one file named as file0000.chk, file0001.chk etc. What is that?

    Below is my filelog from hijack...what I can se there is isass.exe that should be removed or?

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\SYSTEM32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\lexbces.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\LEXPPS.EXE
    C:\Program\Microsoft Hardware\Mouse\point32.exe
    C:\spel\daemon.exe
    C:\Program\iTunes\iTunesHelper.exe
    C:\Program\Winamp\winampa.exe
    C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE
    C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb06.exe
    C:\Program\Java\j2re1.4.2_06\bin\jusched.exe
    C:\PROGRAM\POPUPS~1\PSFREE.EXE
    C:\PROGRAM\Spyware Doctor\spydoctor.exe
    C:\PROGRAM\MSN Messenger\msnmsgr.exe
    C:\PROGRAM\Vanliga filer\Microsoft Shared\Works Shared\wkcalrem.exe
    C:\PROGRAM\Bluetooth Software\BTTray.exe
    C:\Program\Bluetooth Software\BTStackServer.exe
    C:\PROGRAM\Digidesign\Drivers\MMERefresh.exe
    C:\WINDOWS\System32\GEARSEC.EXE
    C:\Mysql\bin\mysqld-nt.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
    C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
    C:\Program\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
    C:\Program\iPod\bin\iPodService.exe
    C:\Program\Panda Software\Panda Antivirus Platinum\pavProxy.exe
    C:\PROGRAM\Mozilla Firefox\firefox.exe
    C:\Hijackthis\HijackThis.exe

    N3 - Netscape 7: user_pref("browser.search.defaultengine", "http://www.google.com/"); (C:\Documents and Settings\Standard\Application Data\Mozilla\Profiles\default\nzjg9bhx.slt\prefs.js)
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [POINTER] point32.exe
    O4 - HKLM\..\Run: [Speed racer] C:\Program\Creative\PlayCenter\CTSRReg.exe
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\spel\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [Jet Detection] C:\Program\Creative\SBLive\PROGRAM\ADGJDet.exe
    O4 - HKLM\..\Run: [iTunesHelper] C:\Program\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [WinampAgent] C:\Program\Winamp\winampa.exe
    O4 - HKLM\..\Run: [DigidesignMMERefresh] C:\PROGRAM\Digidesign\Drivers\MMERefresh.exe
    O4 - HKLM\..\Run: [SCANINICIO] "C:\Program\Panda Software\Panda Antivirus Platinum\Inicio.exe"
    O4 - HKLM\..\Run: [APVXDWIN] "C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb06.exe
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program\Java\j2re1.4.2_06\bin\jusched.exe
    O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRAM\POPUPS~1\PSFREE.EXE"
    O4 - HKCU\..\Run: [Spyware Doctor] "C:\PROGRAM\Spyware Doctor\spydoctor.exe" /Q
    O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM\MSN Messenger\msnmsgr.exe" /background
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\PROGRAM\Vanliga filer\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Påminnelser för Kalendern i Microsoft Works.lnk = C:\Program\Vanliga filer\Microsoft Shared\Works Shared\wkcalrem.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\PROGRAM\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: BTTray.lnk = ?
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O23 - Service: Digidesign MME Refresh Service - Digidesign, A Division of Avid Technology, Inc. - C:\PROGRAM\Digidesign\Drivers\MMERefresh.exe
    O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSEC.EXE
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program\iPod\bin\iPodService.exe
    O23 - Service: LexBce Server - Lexmark International, Inc. - C:\WINDOWS\System32\lexbces.exe
    O23 - Service: MySql - Unknown - C:/Mysql/bin/mysqld-nt.exe
    O23 - Service: NVIDIA Driver Helper Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Panda Firewall Service - Unknown - C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
    O23 - Service: Panda anti-virus service - Unknown - C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

    -------------------------------------------------------------------


    Thanks for helping me!

    /D_S
     
  2. caperjack

    caperjack

    Joined:
    Jan 2, 2003
    Messages:
    236
    This site has some good info on Ports and port scans .
    http://www.grc.com/x/ne.dll?rh1dkyd2
    In short panda stopped port scan ,from some one on the out side ,pasically they are to random scans to see if you have there trojan on you computer so they can gather info on you !!

    The 0001.chk files are created when you use Scandisk and it finds errors and or corrupt files and saves the info ,
    Also the top of you hijackthis lig is missing ,the part with you windoss OS,and hijackthis version .please post full log .

    In
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/324880

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice