Question about Port scan & hijack log

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

digital_stor

Thread Starter
Joined
Nov 10, 2004
Messages
36
Hello

I'm using Panda antivirus ant recently I got a popup message (from Panda antivirus) that said that Panda A. had stopped a portscanning from outer source....?
What is that?

I have also found a couple of maps in C:/ that is named as Found.000, Found.001, Found.002 etc. Every of those mapps has atleast one file named as file0000.chk, file0001.chk etc. What is that?

Below is my filelog from hijack...what I can se there is isass.exe that should be removed or?

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\lexbces.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\LEXPPS.EXE
C:\Program\Microsoft Hardware\Mouse\point32.exe
C:\spel\daemon.exe
C:\Program\iTunes\iTunesHelper.exe
C:\Program\Winamp\winampa.exe
C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb06.exe
C:\Program\Java\j2re1.4.2_06\bin\jusched.exe
C:\PROGRAM\POPUPS~1\PSFREE.EXE
C:\PROGRAM\Spyware Doctor\spydoctor.exe
C:\PROGRAM\MSN Messenger\msnmsgr.exe
C:\PROGRAM\Vanliga filer\Microsoft Shared\Works Shared\wkcalrem.exe
C:\PROGRAM\Bluetooth Software\BTTray.exe
C:\Program\Bluetooth Software\BTStackServer.exe
C:\PROGRAM\Digidesign\Drivers\MMERefresh.exe
C:\WINDOWS\System32\GEARSEC.EXE
C:\Mysql\bin\mysqld-nt.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\Program\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\Program\iPod\bin\iPodService.exe
C:\Program\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\PROGRAM\Mozilla Firefox\firefox.exe
C:\Hijackthis\HijackThis.exe

N3 - Netscape 7: user_pref("browser.search.defaultengine", "http://www.google.com/"); (C:\Documents and Settings\Standard\Application Data\Mozilla\Profiles\default\nzjg9bhx.slt\prefs.js)
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [Speed racer] C:\Program\Creative\PlayCenter\CTSRReg.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\spel\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Jet Detection] C:\Program\Creative\SBLive\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program\Winamp\winampa.exe
O4 - HKLM\..\Run: [DigidesignMMERefresh] C:\PROGRAM\Digidesign\Drivers\MMERefresh.exe
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb06.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program\Java\j2re1.4.2_06\bin\jusched.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRAM\POPUPS~1\PSFREE.EXE"
O4 - HKCU\..\Run: [Spyware Doctor] "C:\PROGRAM\Spyware Doctor\spydoctor.exe" /Q
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\PROGRAM\Vanliga filer\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Påminnelser för Kalendern i Microsoft Works.lnk = C:\Program\Vanliga filer\Microsoft Shared\Works Shared\wkcalrem.exe
O4 - Global Startup: Microsoft Office.lnk = C:\PROGRAM\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: BTTray.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O23 - Service: Digidesign MME Refresh Service - Digidesign, A Division of Avid Technology, Inc. - C:\PROGRAM\Digidesign\Drivers\MMERefresh.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSEC.EXE
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program\iPod\bin\iPodService.exe
O23 - Service: LexBce Server - Lexmark International, Inc. - C:\WINDOWS\System32\lexbces.exe
O23 - Service: MySql - Unknown - C:/Mysql/bin/mysqld-nt.exe
O23 - Service: NVIDIA Driver Helper Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Panda Firewall Service - Unknown - C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
O23 - Service: Panda anti-virus service - Unknown - C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

-------------------------------------------------------------------


Thanks for helping me!

/D_S
 
Joined
Jan 2, 2003
Messages
236
This site has some good info on Ports and port scans .
http://www.grc.com/x/ne.dll?rh1dkyd2
In short panda stopped port scan ,from some one on the out side ,pasically they are to random scans to see if you have there trojan on you computer so they can gather info on you !!

The 0001.chk files are created when you use Scandisk and it finds errors and or corrupt files and saves the info ,
Also the top of you hijackthis lig is missing ,the part with you windoss OS,and hijackthis version .please post full log .

In
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top