UNSOLVED

Nissi1

updated

19 years ago

N

Nissi1

322 Posts

0

6814

October 9th, 2007 22:00

Please Help!!!

Good evening:
 
Yesterday I noticed 11 inbound  port scans in the McAfee view log and 1 EICAR test file (quarantined) in the detection log.  (I have the paid version of McAfee.)  I tried to reach McAfee several times to ask whether they ran these tests, but they were very busy. 
 
I decided not to take any chances so I ran 3 scans:  McAfee, Super Antispyware and Spybot.  Of course McAfee found nothing and the others found low level tracking cookies.
 
Tonight a small screen opened indicating there are unrecognized files on my computer and was it alright to relay the information.  I clicked OK and called McAfee, for the 2nd time today.
 
The first time I called and explained about the scans.  I guess I did not explain myself well because after several attempts, I was finally disconnected.
 
I called again tonight and reported the port scans and the message.  I was asked which program sent the message.  I explained the message just came on the screen.  This went on for about 15 minutes; he asking what program and me saying there was not any program. 
 
I explained I was using AOL and reading mail at the time the message appeared.  However, that was not enough.  The technician kept insisting that it had to be a program that delivered the message.  I kept telling him the message just came on the screen.  He insisted that he needed further information brefore he could be of assistance.
 
Please somebody explain to me what  information is needed?  There are 11 port scans on my computer (all done at the same time) and files the computer does not recognize.  What else is needed before I can obtain some assistance?
 
Thank you,
 
Nissi1
 
Dell Dimension E521
1Gb
Vista Home Premium
  • mombodog

    2 Intern

    •

    12735 Posts

    214

    0

    Posted October 9th, 2007 23:00

    port scans go on all the time, as long as McAfee blocks them, there is no problem. There is probably a program setting in McAfee to stop nagging you with these non critical messages.
     
    As far as the other message about files, we do need to know what program is making these pop ups. Please post the exact and complete message that pops up.
     
     
    It is always best to say NO, when you do not know what program is requesting an action.
     
     
     
    That EICAR file is just a test file used to see if your AV software is working, not sure how it got on there, unless you started a software test to check your McAfee Anti Virus software., it is harmless.
  • mombodog

    2 Intern

    •

    12735 Posts

    214

    0

    Posted October 10th, 2007 00:00

    "I still do not understand what is meant about "what program?" 
     
    Since I cannot see your screen, I am depending on you to describe the popup as precisely and completely as you can. The next time it pops up write it down.
     
    "someone looking  to access my computer.  Is this true?"
     
    Yes, not so nice people run what is called port scanners on specific IP ranges, looking for vulnerable computers to infect or take control of, this has been going on for years now, that is the whole reason firewalls were invented. Not to worry any modern firewall stops this activity.
     
    You can do what is called a screen shot of the message pop up, and post it here, read this on how to do it.
     
    It says to use print screen function, but Vista has a nice snipping tool that can do it better.
     
    then follow the directions on how to upload the screenshot to photobucket.com, and how to post the screen shot in this forum.
  • Nissi1

    322 Posts

    214

    0

    Posted October 10th, 2007 00:00

    Thank you for your response Mombodog.
     
    Unfortunately, I do not remember the exact message.  It startled me especially since I was already concerned about the port scans.  Also, I check the McAfee logs regularly and this is the first time these port scans were listed.
     
    I still do not understand what is meant about "what program?"  Those little request windows occur often, i.e., "a program is trying to close/open this window, allow/do not allow, etc.  I have never noticed which program was sending the request/information.
     
    Also regarding the inbound port scans, when I Googled the information I read that it was someone looking  to access my computer.  Is this true?
     
    I have heard and read so many horror stories regarding computer viruses, anything unfamiliar puts me on edge.:smileysurprised:
     
    Nissi1
  • Nissi1

    322 Posts

    214

    0

    Posted October 10th, 2007 02:00

    Mombodog:
     
    I have gone over everything you wrote and I appreciate your thoroughness.  I have used the snipping tool in the past and will certainly use it if that notice pops up again.
     
    I would never have thought a message of that sort could be a scam.   Live and learn.
     
    However, I think it is time to make this forum my first stop for technical support.  Apart from the invaluable technical information, it will also save wear and tear on my nerves; at least when it comes to this computer.:smileyhappy: 
     
    Thank you Mombodog and may God continue to Bless you.
     
    Nissi1
     
    P.S.  Love your avitars
  • Ptero4

    6 Posts

    214

    0

    Posted October 10th, 2007 17:00

    The dialog that pop out saying "Allow", "Do not allow" is the Windows Vista "User Account Control" mechanism. When the message appeared it showed the name of the program that tried to access parts of the OS that requires admin privileges. Unfortunatelly it means that if you clicked "Allow" (which since UAC is so annoying, you probably did), Vista won't show the UAC popup for that app anymore.
  • Nissi1

    322 Posts

    214

    0

    Posted October 10th, 2007 19:00

    Ptero:
     
    Thank you for the information.  Believe me the UAC is still active on my computer.  Annoying, yes.  I will pay closer attention to all messages from now on.
     
    God Bless You,
     
    Nissi1