Tech Support Guy banner
  • IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice
Status
Not open for further replies.
1 - 2 of 2 Posts

·
Registered
Joined
·
36 Posts
Discussion Starter · #1 ·
Hello

I'm using Panda antivirus ant recently I got a popup message (from Panda antivirus) that said that Panda A. had stopped a portscanning from outer source....?
What is that?

I have also found a couple of maps in C:/ that is named as Found.000, Found.001, Found.002 etc. Every of those mapps has atleast one file named as file0000.chk, file0001.chk etc. What is that?

Below is my filelog from hijack...what I can se there is isass.exe that should be removed or?

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\lexbces.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\LEXPPS.EXE
C:\Program\Microsoft Hardware\Mouse\point32.exe
C:\spel\daemon.exe
C:\Program\iTunes\iTunesHelper.exe
C:\Program\Winamp\winampa.exe
C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb06.exe
C:\Program\Java\j2re1.4.2_06\bin\jusched.exe
C:\PROGRAM\POPUPS~1\PSFREE.EXE
C:\PROGRAM\Spyware Doctor\spydoctor.exe
C:\PROGRAM\MSN Messenger\msnmsgr.exe
C:\PROGRAM\Vanliga filer\Microsoft Shared\Works Shared\wkcalrem.exe
C:\PROGRAM\Bluetooth Software\BTTray.exe
C:\Program\Bluetooth Software\BTStackServer.exe
C:\PROGRAM\Digidesign\Drivers\MMERefresh.exe
C:\WINDOWS\System32\GEARSEC.EXE
C:\Mysql\bin\mysqld-nt.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\Program\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\Program\iPod\bin\iPodService.exe
C:\Program\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\PROGRAM\Mozilla Firefox\firefox.exe
C:\Hijackthis\HijackThis.exe

N3 - Netscape 7: user_pref("browser.search.defaultengine", "http://www.google.com/"); (C:\Documents and Settings\Standard\Application Data\Mozilla\Profiles\default\nzjg9bhx.slt\prefs.js)
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [Speed racer] C:\Program\Creative\PlayCenter\CTSRReg.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\spel\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Jet Detection] C:\Program\Creative\SBLive\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program\Winamp\winampa.exe
O4 - HKLM\..\Run: [DigidesignMMERefresh] C:\PROGRAM\Digidesign\Drivers\MMERefresh.exe
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb06.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program\Java\j2re1.4.2_06\bin\jusched.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRAM\POPUPS~1\PSFREE.EXE"
O4 - HKCU\..\Run: [Spyware Doctor] "C:\PROGRAM\Spyware Doctor\spydoctor.exe" /Q
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\PROGRAM\Vanliga filer\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Påminnelser för Kalendern i Microsoft Works.lnk = C:\Program\Vanliga filer\Microsoft Shared\Works Shared\wkcalrem.exe
O4 - Global Startup: Microsoft Office.lnk = C:\PROGRAM\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: BTTray.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O23 - Service: Digidesign MME Refresh Service - Digidesign, A Division of Avid Technology, Inc. - C:\PROGRAM\Digidesign\Drivers\MMERefresh.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSEC.EXE
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program\iPod\bin\iPodService.exe
O23 - Service: LexBce Server - Lexmark International, Inc. - C:\WINDOWS\System32\lexbces.exe
O23 - Service: MySql - Unknown - C:/Mysql/bin/mysqld-nt.exe
O23 - Service: NVIDIA Driver Helper Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Panda Firewall Service - Unknown - C:\Program\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
O23 - Service: Panda anti-virus service - Unknown - C:\Program\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

-------------------------------------------------------------------

Thanks for helping me!

/D_S
 

·
Registered
Joined
·
236 Posts
This site has some good info on Ports and port scans .
http://www.grc.com/x/ne.dll?rh1dkyd2
In short panda stopped port scan ,from some one on the out side ,pasically they are to random scans to see if you have there trojan on you computer so they can gather info on you !!

The 0001.chk files are created when you use Scandisk and it finds errors and or corrupt files and saves the info ,
Also the top of you hijackthis lig is missing ,the part with you windoss OS,and hijackthis version .please post full log .

In
 
1 - 2 of 2 Posts
Status
Not open for further replies.
Top