Computer Crash this Morning

  birdface 07:57 AM 27 Mar 12
Locked
Answered

Computer crashed this morning after downloading and running Eset smart security.

I did have Avast on but removed it completely using Revo uninstaller.

Eset did find a problem in the Firewall which I think it stopped from running but will have to wait till it stops scanning so that I can check what the fault was.

Ok Scan Just finished and the problem was.Port scanning Attack.

Source 221. 192.199.49:1.1200

target 82.29.12,241:6515 TCP

Any way of finding out what it is maybe one of my other security programs.

Probably a one off but will see if it happens again.Scan ran Ok that time without crashing.

032712-26972-01.dmp 27/03/2012 07:25:48 UNEXPECTEDKERNELMODE_TRAP 0x1000007f 0x00000008 0x807c6750 0x00000000 0x00000000 ehdrv.sys ehdrv.sys+19d0 ESET Helper driver ESET Smart Security ESET 5.0.87.0 32-bit ntoskrnl.exe+b4ae3 ntoskrnl.exe+11754 C:\Windows\Minidump\032712-26972-01.dmp 2 15 7601 179,019

  johndrew 10:20 AM 27 Mar 12

Correct me if I'm wrong, but doesn't Eset Smart Security include a firewall of its own? If so it could be that a conflict occurred between that which you have installed and the Eset item.

  rdave13 10:27 AM 27 Mar 12

These security programs are self protective so I don't think using revo to remove Avast is a good idea. I would have removed it in safe mode using the Avast removal tool. Possibly some leftover files conflicting with Eset.

  birdface 10:46 AM 27 Mar 12

johndrew

I had Avast firewall but removed it all before downloading Eset with its own Firewall.

I had something like it before as it used to react when running my poker Stars on line gaming program.But I deleted that about a month ago.

This is what I am getting now.

27/03/2012 10:11:41 Detected Port Scanning attack 58.218.199.147:12200 82.29.12.241:8088 TCP
27/03/2012 09:39:09 Detected Port Scanning attack 58.218.199.227:12200 82.29.12.241:80 TCP
27/03/2012 08:24:29 Detected Port Scanning attack 221.1.220.149:12200 82.29.12.241:2301 TCP
27/03/2012 08:05:09 Detected Port Scanning attack 58.218.199.250:12200 82.29.12.241:8008 TCP
27/03/2012 07:20:30 Detected Port Scanning attack 221.192.199.49:12200 82.29.12.241:6515 TCP

Now when I installed Eset I set it to automatic filtering mode in the Firewall settings.maybe I should have set it to interactive mode so not sure about that.Maybe someone using Eset can tell me what their firewall is set at.

Poker stars was on my other computer and also using Eset on that.

  birdface 10:58 AM 27 Mar 12

rdave13

I found no other parts for Avast on the menu bar.Ran my Registry cleaner which found one thing for avast but never checked what it was as I had already deleted it.

If it happens again I will run the Avast removal tool to see if it clears it.

Winaso question.

Did you not usually get a months trial with that program or am I getting mixed up with something else.

Getting 400 odd problems running Winaso so tried C Cleaner which removed quite a lot then tried Winaso again but it still showed over 400 problems.As it only deletes 10 at a time it would have taken ages so gave up.

Winaso was for my son in laws computer.I always preferred it to C Cleaner.

Going out now but will be back in a few hours in case anyone was wondering why I never posted back.

  johndrew 10:19 AM 28 Mar 12

All those scans appear to be on ports associated with your connection to the web. I think it is likely they are false positives but you could try running the Gibson checker to see what your security is like and whether any port is possible of being scanned. I feel certain that some cookies placed by some sites could cause this type of reaction and it could be the firewall in Eset has been updated since your last installation.

I have always used the interactive mode when installing a firewall. It takes a bit longer to settle down but at least it provides the confidence of being set to the values/conditions of your choice rather than the default.

  birdface 12:31 PM 28 Mar 12

johndrew

I think you are correct with the false positives as I have trouble with the web connection.

Just had another look and there seems to be a few more added.

28/03/2012 07:44:07 Detected Port Scanning attack 221.1.220.149:12200 82.29.12.241:2301 TCP
28/03/2012 00:07:45 Detected Port Scanning attack 221.192.199.49:12200 82.29.12.241:9090 TCP
28/03/2012 00:06:54 Detected Port Scanning attack 221.1.220.149:12200 82.29.12.241:8088 TCP
27/03/2012 21:45:18 Detected Port Scanning attack 58.218.199.147:12200 82.29.12.241:3246 TCP
27/03/2012 21:12:51 Detected Port Scanning attack 58.218.199.227:12200 82.29.12.241:8000 TCP
27/03/2012 20:24:12 Detected Port Scanning attack 221.192.199.49:12200 82.29.12.241:2301 TCP
27/03/2012 20:08:18 Detected Port Scanning attack 221.1.220.149:12200 82.29.12.241:2301 TCP
27/03/2012 19:46:35 Detected Port Scanning attack 58.218.199.227:12200 82.29.12.241:6588 TCP
27/03/2012 18:19:57 Detected Port Scanning attack 58.218.199.227:12200 82.29.12.241:2301 TCP
27/03/2012 18:08:16 Detected Port Scanning attack 58.218.199.250:12200 82.29.12.241:7212 TCP
27/03/2012 17:56:04 Detected Port Scanning attack 58.218.199.147:12200 82.29.12.241:8088 TCP
27/03/2012 15:37:18 Detected Port Scanning attack 58.218.199.250:12200 82.29.12.241:8080 TCP
27/03/2012 14:45:45 Detected Port Scanning attack 221.192.199.49:12200 82.29.12.241:2301 TCP
27/03/2012 10:11:41 Detected Port Scanning attack 58.218.199.147:12200 82.29.12.241:8088 TCP
27/03/2012 09:39:09 Detected Port Scanning attack 58.218.199.227:12200 82.29.12.241:80 TCP
27/03/2012 08:24:29 Detected Port Scanning attack 221.1.220.149:12200 82.29.12.241:2301 TCP
27/03/2012 08:05:09 Detected Port Scanning attack 58.218.199.250:12200 82.29.12.241:8008 TCP
27/03/2012 07:20:30 Detected Port Scanning attack 221.192.199.49:12200 82.29.12.241:6515 TCP

I will have a look at the checker that you posted.

  birdface 12:59 PM 28 Mar 12

That checker seemed to think things were ok.How would you allow those port scanning attacks to run normally again without being classed as a scanning attack.

I just downloaded Eset Smart Security yesterday as I had already removed it about 4 months ago to run Avast.Fully updated it yesterday before running it.

It is valid up till may and was getting fed up with the Avast pop ups telling me it was running out soon.

I have been advised to run the Avast removal tool just to see if there were any leftovers.So might do that this afternoon.

  KRONOS the First 13:49 PM 28 Mar 12

Maybe you would not get so many problems if you did not use these reg cleaners, I have MSE and Malwarebytes with Windows firewall and scan one a month. I do not use a reg cleaner of any sort as,in the past they have caused more trouble than they solved. I cannot remember when I last had a problem with my PC apart from the ones caused by myself with a tweak to far.

  birdface 19:40 PM 28 Mar 12

Ran the Avast removal program today so will see if that makes any difference.

  birdface 22:11 PM 28 Mar 12

Still having problems connecting to the Internet when booting up.

Troubleshoot does no good clicking on local Area Connection and pressing repair does no good.But If I start HitmanPro it will then connect to the Internet.

A bit weird I thought how can connecting to an Anti-malware program start your Internet connection.

Tried it with other Security programs and they would not connect.Nor I/E or Firefox.

Advertisement

This thread is now locked and can not be replied to.

Sony Xperia Z5 review: Hands-on with the phone which the Z3+ should have been

1995-2015: How technology has changed the world in 20 years

Get your photos turned into illos by some of the world’s best artists

What to expect at the September Apple event: Apple announces 9 September event, sends out invites