Stopping Port Scan

[Richard in Va.]

My System Suite 7 (Avanquest) is reporting continuous port scans.

It's list of running applications that are trying to access the internet shows...

C:\Windows/system32/alg.exe (as running 1 times)
C:\Windows/system32/svchost.exe (as running 13 times)
C:\Windows\system32\NTOSKRNL.EXE (as running 2 times)

The security log shows svchost.exe as the application causing the port scans.

Anyone got a clue what going on...???

 

[David H. Lipman]

From: "Richard in Va." <[email protected]>

| My System Suite 7 (Avanquest) is reporting continuous port scans.
|
| It's list of running applications that are trying to access the internet shows...
|
| C:\Windows/system32/alg.exe (as running 1 times)
| C:\Windows/system32/svchost.exe (as running 13 times)
| C:\Windows\system32\NTOSKRNL.EXE (as running 2 times)
|
| The security log shows svchost.exe as the application causing the port scans.
|
| Anyone got a clue what going on...???
|

Use Ethereal/Wireshark and perform a decode of the communication.