|
|||||||
|
|
|
 |
|
|
Strumenti |
28-04-2007, 16:02
|
#1 |
|
Senior Member
Iscritto dal: Apr 2004
Città: Milano
Messaggi: 6872
|
Caduta della linea ADSL
Una mia amica ha dei problemi a navigare
Praticamente dopo pochi minuti che è collegata gli cade la linea e non riesce più a far niente fino a quanto non riavvia il router Ha già provato a contattare il provider (Wind) ma le hanno risposto che la linea è ok. Ha anche cambiato il router prendendo un DLink nuovo ma il problema è rimasto. C'è solo quel pc collegato al router Tempo fa sul lavoro avevo un problema molto simile e ho scoperto che era un virus a bloccare la connessione. Questo è il thread Così ho provato a farle fare una scansione con hijackthis... ma non riesco a trovare niente di anomalo Questo è il log Codice:
Logfile of HijackThis v1.99.1
Scan saved at 16.34.55, on 28/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmi\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Programmi\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Programmi\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\File comuni\Ulead Systems\DVD\ULCDRSvr.exe
C:\Programmi\Java\jre1.5.0_02\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programmi\File comuni\Ulead Systems\AutoDetector\monitor.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
C:\apps\ABoard\AOSD.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\Programmi\QuickTime\qttask.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\V0230Mon.exe
C:\Programmi\Creative\Shared Files\CTSched.exe
C:\Programmi\BearShare\BearShare.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programmi\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Programmi\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Programmi\BearFlix\BearFlix.exe
C:\Programmi\MSN Messenger\MsnMsgr.Exe
C:\Programmi\Microsoft ActiveSync\wcescomm.exe
C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
C:\Programmi\Skype\Phone\Skype.exe
C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe
C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
C:\Programmi\File comuni\Ahead\Lib\NMIndexStoreSvr.exe
C:\Programmi\Yahoo!\Messenger\ymsgr_tray.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programmi\MSN Messenger\usnsvc.exe
D:\DOCUME~1\Angelo\IMPOST~1\Temp\Directory temporanea 1 per hijackthis_199.zip\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programmi\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programmi\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Programmi\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar3.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\Windows Live Toolbar\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Barra degli Strumenti di IdiomaX - {477A7A3C-8B11-4B02-ADD1-7A01C4D00FA2} - C:\Programmi\File comuni\IdiomaX Shared\Cat 6.0\TrdIEAddIn.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programmi\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar3.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\Windows Live Toolbar\msntb.dll
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Programmi\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [AzMixerSel] C:\Programmi\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmi\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Programmi\File comuni\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [EmailChecker] C:\APPS\EmailChecker\ech.exe
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [IdiomaX Office] C:\Programmi\IdiomaX Suite 4.0\IdxOffice.exe
O4 - HKLM\..\Run: [IdiomaX Product Update] C:\Programmi\File comuni\IdiomaX Shared\Cat 6.0\IdxLUpdate.exe /AUTOSTART
O4 - HKLM\..\Run: [V0230Mon.exe] C:\WINDOWS\system32\V0230Mon.exe
O4 - HKLM\..\Run: [CreativeTaskScheduler] "C:\Programmi\Creative\Shared Files\CTSched.exe" /logon
O4 - HKLM\..\Run: [BearShare] "C:\Programmi\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MMTray] C:\Programmi\Musicmatch\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [mmtask] C:\Programmi\Musicmatch\Musicmatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [BearFlix] "C:\Programmi\BearFlix\BearFlix.exe" /pause
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programmi\File comuni\Ahead\Lib\NeroCheck.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Programmi\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programmi\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [updateMgr] C:\Programmi\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [swg] C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Programmi\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [WhenUSave] "C:\Programmi\Save\Save.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe"
O8 - Extra context menu item: &Windows Live Search - res://C:\Programmi\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Apri in nuova scheda in primo piano - res://C:\Programmi\Windows Live Toolbar\Components\it-it\msntabres.dll.mui/230?4034a32eedc84c1cbec7716d46b46adc
O8 - Extra context menu item: Apri in nuova scheda in secondo piano - res://C:\Programmi\Windows Live Toolbar\Components\it-it\msntabres.dll.mui/229?4034a32eedc84c1cbec7716d46b46adc
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Crea preferito portatile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Programmi\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Programmi\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra button: Mostra/Nascondi Barra di Traduzione - {FE768A8F-9F88-4511-B28B-552ED2F6B500} - C:\Programmi\File comuni\IdiomaX Shared\Cat 6.0\TrdIEAddIn.dll
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Programmi\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\it.htm
O15 - Trusted Zone: *.musicmatch.com
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O18 - Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Programmi\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programmi\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Sony SPTI Service for DVE (ICDSPTSV) - Sony Corporation - C:\WINDOWS\system32\IcdSptSv.exe
O23 - Service: NBService - Nero AG - C:\Programmi\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Programmi\File comuni\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Utilità di pianificazione di LiveUpdate automatico - Unknown owner - C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
Codice:
Connessioni attive Proto Indirizzo locale Indirizzo esterno Stato TCP 0.0.0.0:135 0.0.0.0:0 LISTENING TCP 0.0.0.0:445 0.0.0.0:0 LISTENING TCP 0.0.0.0:990 0.0.0.0:0 LISTENING TCP 0.0.0.0:6348 0.0.0.0:0 LISTENING TCP 0.0.0.0:8537 0.0.0.0:0 LISTENING TCP 0.0.0.0:58398 0.0.0.0:0 LISTENING TCP 127.0.0.1:1032 0.0.0.0:0 LISTENING TCP 127.0.0.1:5679 0.0.0.0:0 LISTENING TCP 127.0.0.1:7438 0.0.0.0:0 LISTENING TCP 127.0.0.1:12025 0.0.0.0:0 LISTENING TCP 127.0.0.1:12080 0.0.0.0:0 LISTENING TCP 127.0.0.1:12110 0.0.0.0:0 LISTENING TCP 127.0.0.1:12119 0.0.0.0:0 LISTENING TCP 127.0.0.1:12143 0.0.0.0:0 LISTENING TCP 127.0.0.1:12346 0.0.0.0:0 LISTENING TCP 151.20.17.7:139 0.0.0.0:0 LISTENING TCP 151.20.17.7:1047 220.238.235.128:6346 ESTABLISHED TCP 151.20.17.7:1052 24.96.136.28:6348 ESTABLISHED TCP 151.20.17.7:1070 204.116.214.146:6348 FIN_WAIT_1 TCP 151.20.17.7:1071 66.215.157.60:6348 FIN_WAIT_1 TCP 151.20.17.7:1085 71.155.243.58:6348 ESTABLISHED TCP 151.20.17.7:1094 83.189.216.150:6346 ESTABLISHED TCP 151.20.17.7:1099 83.29.170.229:6346 ESTABLISHED TCP 151.20.17.7:1102 83.22.102.23:6348 ESTABLISHED TCP 151.20.17.7:1133 69.236.135.141:6348 ESTABLISHED TCP 151.20.17.7:1140 69.138.110.188:15366 ESTABLISHED TCP 151.20.17.7:1144 212.10.228.164:6348 ESTABLISHED TCP 151.20.17.7:1151 213.196.205.189:6346 ESTABLISHED TCP 151.20.17.7:1173 125.31.125.101:6346 ESTABLISHED TCP 151.20.17.7:1174 83.85.67.212:47430 ESTABLISHED TCP 151.20.17.7:1181 68.1.140.118:6348 ESTABLISHED TCP 151.20.17.7:1191 82.50.149.161:6346 ESTABLISHED TCP 151.20.17.7:1194 83.4.94.66:6348 ESTABLISHED TCP 151.20.17.7:1195 83.5.128.62:6348 ESTABLISHED TCP 151.20.17.7:1198 216.189.163.175:36397 ESTABLISHED TCP 151.20.17.7:1203 87.14.222.237:6348 ESTABLISHED TCP 151.20.17.7:1204 63.134.161.168:15479 ESTABLISHED TCP 151.20.17.7:1206 81.190.37.73:6348 FIN_WAIT_1 TCP 151.20.17.7:1211 24.93.119.154:40963 ESTABLISHED TCP 151.20.17.7:1227 24.215.80.128:23788 ESTABLISHED TCP 151.20.17.7:1230 76.105.134.178:21718 ESTABLISHED TCP 151.20.17.7:1234 72.139.168.79:6348 ESTABLISHED TCP 151.20.17.7:1241 65.25.11.87:6633 ESTABLISHED TCP 151.20.17.7:1254 219.27.196.3:45883 ESTABLISHED TCP 151.20.17.7:1261 24.108.85.2:30009 ESTABLISHED TCP 151.20.17.7:1264 24.108.82.101:25375 ESTABLISHED TCP 151.20.17.7:1266 75.75.21.234:42889 FIN_WAIT_1 TCP 151.20.17.7:1288 83.11.226.127:6346 TIME_WAIT TCP 151.20.17.7:1290 83.22.54.174:6348 TIME_WAIT TCP 151.20.17.7:1292 80.116.183.170:6348 TIME_WAIT TCP 151.20.17.7:1293 87.21.108.188:6348 TIME_WAIT TCP 151.20.17.7:1294 83.5.147.243:6348 TIME_WAIT TCP 151.20.17.7:1295 83.8.183.202:6348 TIME_WAIT TCP 151.20.17.7:1296 24.37.132.130:6346 ESTABLISHED TCP 151.20.17.7:1305 82.52.8.82:6348 TIME_WAIT TCP 151.20.17.7:1306 69.73.99.245:6346 TIME_WAIT TCP 151.20.17.7:1307 83.7.149.97:6348 TIME_WAIT TCP 151.20.17.7:1308 85.22.2.73:6346 TIME_WAIT TCP 151.20.17.7:1309 87.16.127.93:6348 ESTABLISHED TCP 151.20.17.7:1310 172.176.128.114:6348 TIME_WAIT TCP 151.20.17.7:1311 83.27.66.112:6348 TIME_WAIT TCP 151.20.17.7:1312 91.64.153.111:6348 TIME_WAIT TCP 151.20.17.7:1313 86.63.101.158:6348 TIME_WAIT TCP 151.20.17.7:1314 83.21.122.225:6348 TIME_WAIT TCP 151.20.17.7:1315 74.116.122.178:6348 ESTABLISHED TCP 151.20.17.7:1316 88.156.86.144:6348 TIME_WAIT TCP 151.20.17.7:1317 87.6.178.127:6348 TIME_WAIT TCP 151.20.17.7:1318 85.176.233.235:6348 TIME_WAIT TCP 151.20.17.7:1320 83.20.145.235:6348 TIME_WAIT TCP 151.20.17.7:1321 87.3.90.156:6346 TIME_WAIT TCP 151.20.17.7:1322 68.9.43.162:6348 TIME_WAIT TCP 151.20.17.7:6348 60.48.177.18:4303 ESTABLISHED TCP 151.20.17.7:6348 62.13.168.78:44594 ESTABLISHED TCP 151.20.17.7:6348 80.54.186.135:3313 LAST_ACK TCP 151.20.17.7:6348 80.116.125.247:2031 ESTABLISHED TCP 151.20.17.7:6348 80.121.36.83:3950 ESTABLISHED TCP 151.20.17.7:6348 82.61.126.214:3179 ESTABLISHED TCP 151.20.17.7:6348 83.17.180.42:3891 FIN_WAIT_1 TCP 151.20.17.7:6348 83.190.158.219:3754 ESTABLISHED TCP 151.20.17.7:6348 84.192.176.28:60061 ESTABLISHED TCP 151.20.17.7:6348 85.177.232.153:2063 FIN_WAIT_1 TCP 151.20.17.7:6348 87.13.36.220:62843 ESTABLISHED TCP 151.20.17.7:6348 87.25.245.84:2943 ESTABLISHED TCP 151.20.17.7:6348 87.65.151.232:4591 ESTABLISHED TCP 151.20.17.7:6348 87.139.27.172:65009 ESTABLISHED TCP 151.20.17.7:6348 88.136.29.159:2798 ESTABLISHED TCP 151.20.17.7:6348 151.41.152.90:2703 ESTABLISHED TCP 151.20.17.7:6348 207.255.76.112:1424 ESTABLISHED TCP 151.20.17.7:6348 208.53.159.54:1838 ESTABLISHED TCP 151.20.17.7:6348 212.76.37.178:53693 FIN_WAIT_1 TCP 151.20.17.7:8537 81.208.83.223:48971 ESTABLISHED TCP 151.20.17.7:8537 82.57.49.74:3121 ESTABLISHED TCP 151.20.17.7:8537 82.160.76.165:1479 ESTABLISHED TCP 151.20.17.7:8537 83.23.43.86:4939 ESTABLISHED TCP 151.20.17.7:8537 83.145.170.34:1860 ESTABLISHED TCP 151.20.17.7:8537 83.186.113.237:52177 ESTABLISHED TCP 151.20.17.7:8537 83.189.212.204:3186 ESTABLISHED TCP 151.20.17.7:8537 85.179.103.44:2414 ESTABLISHED TCP 151.20.17.7:8537 87.9.171.102:4399 ESTABLISHED TCP 151.20.17.7:8537 87.14.222.15:2636 ESTABLISHED TCP 151.20.17.7:8537 87.96.69.52:2653 ESTABLISHED TCP 151.20.17.7:8537 88.231.252.244:26294 ESTABLISHED TCP 151.20.17.7:8537 89.100.25.88:2892 ESTABLISHED TCP 151.20.17.7:8537 89.243.236.225:1201 LAST_ACK TCP 151.20.17.7:8537 89.243.236.225:1203 LAST_ACK TCP 151.20.17.7:8537 151.43.11.203:3015 ESTABLISHED TCP 151.20.17.7:8537 151.70.109.53:2745 ESTABLISHED TCP 151.20.17.7:8537 195.136.67.144:1337 ESTABLISHED TCP 151.20.17.7:8537 200.179.110.130:2669 FIN_WAIT_1 TCP 151.20.17.7:8537 201.15.141.122:50980 ESTABLISHED TCP 151.20.17.7:8537 201.57.229.173:4305 ESTABLISHED TCP 151.20.17.7:8537 208.53.159.44:3456 ESTABLISHED UDP 0.0.0.0:445 *:* UDP 0.0.0.0:500 *:* UDP 0.0.0.0:1025 *:* UDP 0.0.0.0:1087 *:* UDP 0.0.0.0:1105 *:* UDP 0.0.0.0:1256 *:* UDP 0.0.0.0:4500 *:* UDP 0.0.0.0:6347 *:* UDP 0.0.0.0:6348 *:* UDP 0.0.0.0:8537 *:* UDP 0.0.0.0:52442 *:* UDP 0.0.0.0:60340 *:* UDP 127.0.0.1:123 *:* UDP 127.0.0.1:1026 *:* UDP 127.0.0.1:1082 *:* UDP 127.0.0.1:1092 *:* UDP 127.0.0.1:1093 *:* UDP 127.0.0.1:1900 *:* UDP 151.20.17.7:123 *:* UDP 151.20.17.7:137 *:* UDP 151.20.17.7:138 *:* UDP 151.20.17.7:1900 *:* UDP 151.20.17.7:2960 *:* UDP 151.20.17.7:7918 *:*
__________________
CASE Phanteks Evolv X | MOBO Asus TUF Gaming X570-Plus (Wi-Fi) | CPU Amd Ryzen 5 3600X | RAM G.Skill F4-3600C16D-32GTZNC | S-VIDEO ZOTAC GeForce® GTX 1080 AMP! Edition | ALI Corsair TX750M | STORAGE Samsung 970 Evo Plus 500GB + WDC WD40EFPX 4TB |
|
|
|
28-04-2007, 16:32
|
#2 |
|
Senior Member
Iscritto dal: Dec 2006
Messaggi: 9542
|
posta SNR e Attenuazione in DOWNSTREAM
|
|
|
|
|
28-04-2007, 16:38
|
#3 |
|
Senior Member
Iscritto dal: Apr 2004
Città: Milano
Messaggi: 6872
|
Il problema è che quando non funziona la linea mi dice anche che non riesce a collegarsi alla pagina di configurazione del router (io nn ero a casa sua quindi non ho potuto metterci mano)
Cmq a me quel netstat sembra troppo strano Ci sono troppe connessione aperte e soprattutto troppe sulla porta 6348 e 8537 Un pò la stessa cosa che mi capitava sul lavoro... ma con porte differenti e verso ip locali (anche se non esistevano, ma cmq la tipologia dell'ip era da lan)
__________________
CASE Phanteks Evolv X | MOBO Asus TUF Gaming X570-Plus (Wi-Fi) | CPU Amd Ryzen 5 3600X | RAM G.Skill F4-3600C16D-32GTZNC | S-VIDEO ZOTAC GeForce® GTX 1080 AMP! Edition | ALI Corsair TX750M | STORAGE Samsung 970 Evo Plus 500GB + WDC WD40EFPX 4TB |
|
|
|
|
29-04-2007, 21:47
|
#4 |
|
Member
Iscritto dal: Oct 2006
Messaggi: 249
|
Sì, se quello è un netstat da pc appena accesso c'è di sicuro qualcosa di barzotto. Passa quel log su hijackthis.de, vedrai che qualcosa esce
|
|
|
|
|
30-04-2007, 01:21
|
#5 |
|
Senior Member
Iscritto dal: Apr 2004
Città: Milano
Messaggi: 6872
|
Sì è vero... in effetti qualcosa di sospetto c'è, vediamo cosa succede a eliminare quei file
Grazie ^^
__________________
CASE Phanteks Evolv X | MOBO Asus TUF Gaming X570-Plus (Wi-Fi) | CPU Amd Ryzen 5 3600X | RAM G.Skill F4-3600C16D-32GTZNC | S-VIDEO ZOTAC GeForce® GTX 1080 AMP! Edition | ALI Corsair TX750M | STORAGE Samsung 970 Evo Plus 500GB + WDC WD40EFPX 4TB |
|
|
|
|
|
| Strumenti | |
|
|
Tutti gli orari sono GMT +1. Ora sono le: 13:03.
