Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have windows xp SP3 in that I have free AVG antivirus. I have scan the system with AVG but I did not detect any virus in the system.

But Problem is windows pc sending a lots of request like below ............ to the gateway system !!!

  Jun 21 14:44:01 ebizchem kernel: fp=bad_packets:1 a=DROP IN=eth0 OUT=eth1 SRC=192.168.1.36 DST=192.168.17.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=933 DF PROTO=TCP SPT=139 DPT=1981 WINDOW=8192 RES=0x00 ACK SYN URGP=0 
Jun 21 14:44:01 ebizchem kernel: fp=bad_packets:1 a=DROP IN=eth0 OUT=eth1 SRC=192.168.1.36 DST=192.168.86.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=934 DF PROTO=TCP SPT=139 DPT=1979 WINDOW=8192 RES=0x00 ACK SYN URGP=0 
Jun 21 14:44:01 ebizchem kernel: fp=bad_packets:1 a=DROP IN=eth0 OUT=eth1 SRC=192.168.1.36 DST=192.168.17.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=936 DF PROTO=TCP SPT=139 DPT=1988 WINDOW=8192 RES=0x00 ACK SYN URGP=0 
Jun 21 14:44:01 ebizchem kernel: fp=bad_packets:1 a=DROP IN=eth0 OUT=eth1 SRC=192.168.1.36 DST=192.168.86.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=937 DF PROTO=TCP SPT=139 DPT=1986 WINDOW=8192 RES=0x00 ACK SYN URGP=0 
Jun 21 14:44:01 ebizchem kernel: fp=bad_packets:1 a=DROP IN=eth0 OUT=eth1 SRC=192.168.1.36 DST=192.168.86.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=938 DF PROTO=TCP SPT=139 DPT=1993 WINDOW=8192 RES=0x00 ACK SYN URGP=0 
Jun 21 14:44:01 ebizchem kernel: fp=bad_packets:1 a=DROP IN=eth0 OUT=eth1 SRC=192.168.1.36 DST=192.168.17.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=939 DF PROTO=TCP SPT=139 DPT=1994 WINDOW=8192 RES=0x00 ACK SYN URGP=0 
Jun 21 14:44:01 ebizchem kernel: fp=bad_packets:1 a=DROP IN=eth0 OUT=eth1 SRC=192.168.1.36 DST=192.168.17.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=941 DF PROTO=TCP SPT=139 DPT=2001 WINDOW=8192 RES=0x00 ACK SYN URGP=0 
Jun 21 14:44:01 ebizchem kernel: fp=bad_packets:1 a=DROP IN=eth0 OUT=eth1 SRC=192.168.1.36 DST=192.168.86.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=942 DF PROTO=TCP SPT=139 DPT=1999 WINDOW=8192 RES=0x00 ACK SYN URGP=0 
Jun 21 14:44:01 ebizchem kernel: fp=bad_packets:1 a=DROP IN=eth0 OUT=eth1 SRC=192.168.1.36 DST=192.168.86.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=944 DF PROTO=TCP SPT=139 DPT=2006 WINDOW=8192 RES=0x00 ACK SYN URGP=0 
Jun 21 14:44:01 ebizchem kernel: fp=bad_packets:1 a=DROP IN=eth0 OUT=eth1 SRC=192.168.1.36 DST=192.168.17.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=945 DF PROTO=TCP SPT=139 DPT=2008 WINDOW=8192 RES=0x00 ACK SYN URGP=0 
Jun 21 14:44:01 ebizchem kernel: fp=bad_packets:1 a=DROP IN=eth0 OUT=eth1 SRC=192.168.1.36 DST=192.168.86.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=946 DF PROTO=TCP SPT=139 DPT=2013 WINDOW=8192 RES=0x00 ACK SYN URGP=0 
Jun 21 14:44:01 ebizchem kernel: fp=bad_packets:1 a=DROP IN=eth0 OUT=eth1 SRC=192.168.1.36 DST=192.168.17.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=947 DF PROTO=TCP SPT=139 DPT=2014 WINDOW=8192 RES=0x00 ACK SYN URGP=0 
Jun 21 14:44:01 ebizchem kernel: fp=bad_packets:1 a=DROP IN=eth0 OUT=eth1 SRC=192.168.1.36 DST=192.168.17.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=949 DF PROTO=TCP SPT=139 DPT=2021 WINDOW=8192 RES=0x00 ACK SYN URGP=0 

I dont know this is the virus issue or anything else Please help or guide for the same.

share

migration rejected from serverfault.com Jun 21 '13 at 16:21

This question came from our site for professional system and network administrators. Votes, comments, and answers are locked due to the question being closed here, but it may be eligible for editing and reopening on the site where it originated.

closed as not constructive by Bobby, Journeyman Geek, Dave M, Keltari, Ƭᴇcʜιᴇ007 Jun 21 '13 at 16:21

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

    
You do realize that 139 is NetBIOS, a critical Windows service... –  Nathan C Jun 21 '13 at 11:09
    
avg sucks don't use it, in this case download a offline scanner of some sorts and scan the box while offline. –  user33788 Jun 21 '13 at 13:42