Benvenuto Ospite Cerca | Topic Attivi | Utenti | | Log In | Registra

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » Contollo del log di hijack this per favore

Contollo del log di hijack this per favore Opzioni
Topic Precedente · Topic Sucessivo
xiandaniel
Inviato: Friday, January 25, 2013 8:54:25 AM

Rank: AiutAmico

Iscritto dal : 9/28/2010
Posts: 82
Ho il problema che il log di sicurezza del mio modem ha riscontrato strane attività in questi ultimi due giorni, vedi qui: http://forum.aiutamici.com/yaf_postst88036_Attacco-smurf.aspx
Qualcuno mi stava mangiando tutta la banda sembra... Non so che diavolo sia un attacco smurf esattamente così mi sa che ho postato nella sezione sbagliata...
SO win7 64 bit su notebook asus.

Scansione con Malwarebytes dà tutto pulito. HijackThis mi dà questo log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 08:45:57, on 25/01/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO DI RETE')
O8 - Extra context menu item: Accoda collegamento con BID - file://C:\Program Files (x86)\Bulk Image Downloader\iemenu\iebidlinkqueue.htm
O8 - Extra context menu item: Accoda la pagina corrente con BID - file://C:\Program Files (x86)\Bulk Image Downloader\iemenu\iebidqueue.htm
O8 - Extra context menu item: Apri la pagina corrente con BID - file://C:\Program Files (x86)\Bulk Image Downloader\iemenu\iebid.htm
O8 - Extra context menu item: Apri la pagina corrente con BID Link Explorer - file://C:\Program Files (x86)\Bulk Image Downloader\iemenu\iebidlinkexplorer.htm
O8 - Extra context menu item: Apri link con BID - file://C:\Program Files (x86)\Bulk Image Downloader\iemenu\iebidlink.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted IP range: http://192.168.0.1
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7CFB6324-7FD8-4C27-BA10-1321480B6154}: NameServer = 8.8.8.8,8.8.4.4
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Servizio Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9324 bytes
Torna in alto
 
Sponsor
Inviato: Friday, January 25, 2013 8:54:25 AM

 
Torna in alto
 
cbbusto
Inviato: Friday, January 25, 2013 12:21:39 PM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
Il log è a posto, il tuo non è un problema di virus ma molto probabilmente non hai messo la password di protezione del router e quindi altri si possono collegare sfruttando la tua connessione wireless.
Controlla nei settaggi del router se è protetto. Se non lo sai fare attendi qualche altro amico che ti aiuti.
Torna in alto
 
xiandaniel
Inviato: Friday, January 25, 2013 11:08:29 PM

Rank: AiutAmico

Iscritto dal : 9/28/2010
Posts: 82
Veramente avevo messo una password piuttosto complessa per accedere alla configurazione: più di 20 caratteri, numeri lettere maiuscole, minuscole e caratteri speciali, ma il modem negli ultimi giorni non mi faceva più entrare nella pagina di configurazione così ho dovuto resettare e adesso la pass è giocoforza tornata ad essere admin.
E anche la connessione wireless con il mio notebook è cifrata WPA2, questa con la chiave di default del modem, quella indicata nella scatola di 8 caratteri alfanumerici. Magari cambio questa?
Vedo che in Wireless Settings/Security ho delle opzioni:




Devo dire che spesso trovo le schede più chiare in inglese... Sotto Encryption/Codifica posso scegliere Disable, WEP o WPA Radius.
Sotto Pre-shared Key Type potrei scegliere Hex (64 caratteri)?
Non so bene cosa fare o SE devo farlo.





***************************************************************

Quello che non capisco è perché dopo il reset firefox non mi fa comunque entrare quando digito admin/admin. Continua ad apparire "Autenticazione richiesta Inserire nome utente e password" e poi
401 Authorization Required
Browser not authentication-capable or authentication failed.
Con InternetExplorer riesco ad entrare, ma se cambio password o tento di ripristinare i miei settings da backup, di nuovo non riesco ad entrare nemmeno con Explorer.


Il log del modem adesso:

01/25/2013 21:59:59 **TCP FIN Scan** 192.168.0.100, 61796->> 216.155.139.189, 80 (from PPPoE1 Outbound)
01/25/2013 21:59:59 **TCP FIN Scan** 192.168.0.100, 61799->> 216.155.139.186, 80 (from PPPoE1 Outbound)
01/25/2013 21:59:58 **TCP FIN Scan** 192.168.0.100, 61837->> 4.23.43.254, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:02 **TCP FIN Scan** 192.168.0.100, 61681->> 216.155.139.181, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:02 **TCP FIN Scan** 192.168.0.100, 61680->> 216.155.139.188, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:02 **TCP FIN Scan** 192.168.0.100, 61479->> 216.155.139.182, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:02 **TCP FIN Scan** 192.168.0.100, 61604->> 216.155.139.183, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:02 **TCP FIN Scan** 192.168.0.100, 61388->> 209.84.3.126, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:02 **TCP FIN Scan** 192.168.0.100, 61440->> 216.155.139.189, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:01 **TCP FIN Scan** 192.168.0.100, 61633->> 216.155.131.119, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:01 **TCP FIN Scan** 192.168.0.100, 61614->> 216.155.139.186, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:01 **TCP FIN Scan** 192.168.0.100, 61691->> 216.155.139.188, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:01 **TCP FIN Scan** 192.168.0.100, 61620->> 216.155.144.204, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:01 **TCP FIN Scan** 192.168.0.100, 61523->> 216.155.139.182, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:01 **TCP FIN Scan** 192.168.0.100, 61615->> 216.155.139.181, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:01 **TCP FIN Scan** 192.168.0.100, 61643->> 216.155.131.118, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:01 **TCP FIN Scan** 192.168.0.100, 61573->> 216.155.144.201, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:01 **TCP FIN Scan** 192.168.0.100, 61636->> 216.155.131.116, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61680->> 216.155.139.188, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61388->> 209.84.3.126, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61620->> 216.155.144.204, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61643->> 216.155.131.118, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61642->> 216.155.131.117, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61479->> 216.155.139.182, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61625->> 209.222.3.228, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61604->> 216.155.139.183, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61662->> 216.155.144.201, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61657->> 209.222.3.227, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61597->> 216.155.139.186, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61545->> 216.155.139.189, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61633->> 216.155.131.119, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61636->> 216.155.131.116, 80 (from PPPoE1 Outbound)
01/25/2013 21:58:00 **TCP FIN Scan** 192.168.0.100, 61615->> 216.155.139.181, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:01 **TCP FIN Scan** 192.168.0.100, 61503->> 216.155.144.201, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:01 **TCP FIN Scan** 192.168.0.100, 61501->> 216.155.139.182, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:01 **TCP FIN Scan** 192.168.0.100, 61526->> 216.155.139.189, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:01 **TCP FIN Scan** 192.168.0.100, 61551->> 216.155.139.181, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:01 **TCP FIN Scan** 192.168.0.100, 61499->> 216.155.139.188, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:01 **TCP FIN Scan** 192.168.0.100, 61527->> 216.155.131.120, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:01 **TCP FIN Scan** 192.168.0.100, 61517->> 216.155.131.117, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:01 **TCP FIN Scan** 192.168.0.100, 61489->> 216.155.139.184, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:01 **TCP FIN Scan** 192.168.0.100, 61572->> 216.155.139.186, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:00 **TCP FIN Scan** 192.168.0.100, 61511->> 216.155.131.116, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:00 **TCP FIN Scan** 192.168.0.100, 61495->> 216.155.139.185, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:00 **TCP FIN Scan** 192.168.0.100, 61491->> 216.155.139.180, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:00 **TCP FIN Scan** 192.168.0.100, 61477->> 216.155.131.119, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:00 **TCP FIN Scan** 192.168.0.100, 61478->> 216.155.131.118, 80 (from PPPoE1 Outbound)
01/25/2013 21:57:00 **TCP FIN Scan** 192.168.0.100, 61397->> 216.155.139.181, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:59 **TCP FIN Scan** 192.168.0.100, 61503->> 216.155.144.201, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:59 **TCP FIN Scan** 192.168.0.100, 61552->> 216.155.139.185, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:59 **TCP FIN Scan** 192.168.0.100, 61527->> 216.155.131.120, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:59 **TCP FIN Scan** 192.168.0.100, 61501->> 216.155.139.182, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:59 **TCP FIN Scan** 192.168.0.100, 61497->> 216.155.131.118, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:59 **TCP FIN Scan** 192.168.0.100, 61499->> 216.155.139.188, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:59 **TCP FIN Scan** 192.168.0.100, 61526->> 216.155.139.189, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:59 **TCP FIN Scan** 192.168.0.100, 61492->> 216.155.131.116, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:59 **TCP FIN Scan** 192.168.0.100, 61550->> 216.155.131.117, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61572->> 216.155.139.186, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61477->> 216.155.131.119, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61551->> 216.155.139.181, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61489->> 216.155.139.184, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61424->> 216.155.144.201, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61564->> 216.155.131.120, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61495->> 216.155.139.185, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61475->> 216.155.139.187, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61420->> 216.155.139.182, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61517->> 216.155.131.117, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61478->> 216.155.131.118, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61526->> 216.155.139.189, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61513->> 216.155.139.180, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61499->> 216.155.139.188, 80 (from PPPoE1 Outbound)
01/25/2013 21:56:58 **TCP FIN Scan** 192.168.0.100, 61413->> 216.155.131.116, 80 (from PPPoE1 Outbound)
01/25/2013 21:49:35 **TCP FIN Scan** 192.168.0.100, 61067->> 216.155.144.204, 80 (from PPPoE1 Outbound)
01/25/2013 21:49:35 **TCP FIN Scan** 192.168.0.100, 61176->> 216.155.139.184, 80 (from PPPoE1 Outbound)
01/25/2013 21:49:35 **TCP FIN Scan** 192.168.0.100, 61205->> 216.155.139.182, 80 (from PPPoE1 Outbound)
01/25/2013 21:49:35 **TCP FIN Scan** 192.168.0.100, 61174->> 216.155.139.181, 80 (from PPPoE1 Outbound)
01/25/2013 21:49:35 **TCP FIN Scan** 192.168.0.100, 61109->> 216.155.131.120, 80 (from PPPoE1 Outbound)
01/25/2013 21:49:35 **TCP FIN Scan** 192.168.0.100, 61118->> 216.155.139.187, 80 (from PPPoE1 Outbound)
01/25/2013 21:49:35 **TCP FIN Scan** 192.168.0.100, 61049->> 216.155.144.201, 80 (from PPPoE1 Outbound)
01/25/2013 21:49:35 **TCP FIN Scan** 192.168.0.100, 61126->> 209.222.3.228, 80 (from PPPoE1 Outbound)
01/25/2013 21:49:35 **TCP FIN Scan** 192.168.0.100, 61172->> 216.155.131.116, 80 (from PPPoE1 Outbound)
01/25/2013 21:49:35 **TCP FIN Scan** 192.168.0.100, 61070->> 216.155.139.186, 80 (from PPPoE1 Outbound)
01/25/2013 21:49:35 **TCP FIN Scan** 192.168.0.100, 61107->> 209.222.3.227, 80 (from PPPoE1 Outbound)
01/25/2013 21:49:35 **TCP FIN Scan** 192.168.0.100, 61094->> 216.155.139.185, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:44 **TCP FIN Scan** 192.168.0.100, 60633->> 209.222.3.228, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:44 **TCP FIN Scan** 192.168.0.100, 60620->> 216.155.139.185, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:44 **TCP FIN Scan** 192.168.0.100, 60613->> 216.155.139.184, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:44 **TCP FIN Scan** 192.168.0.100, 60604->> 216.155.131.120, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:44 **TCP FIN Scan** 192.168.0.100, 60644->> 216.155.131.118, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:44 **TCP FIN Scan** 192.168.0.100, 60594->> 216.155.144.201, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:44 **TCP FIN Scan** 192.168.0.100, 60781->> 216.155.139.188, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:44 **TCP FIN Scan** 192.168.0.100, 60724->> 216.155.139.181, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:43 **TCP FIN Scan** 192.168.0.100, 60697->> 216.155.139.187, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:43 **TCP FIN Scan** 192.168.0.100, 60712->> 216.155.139.182, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:43 **TCP FIN Scan** 192.168.0.100, 60696->> 209.222.3.228, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:43 **TCP FIN Scan** 192.168.0.100, 60707->> 216.155.139.180, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:43 **TCP FIN Scan** 192.168.0.100, 60753->> 216.155.131.117, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:43 **TCP FIN Scan** 192.168.0.100, 60690->> 216.155.139.185, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60724->> 216.155.139.181, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60633->> 209.222.3.228, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60693->> 216.155.131.116, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60593->> 216.155.139.188, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60604->> 216.155.131.120, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60613->> 216.155.139.184, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60707->> 216.155.139.180, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60753->> 216.155.131.117, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60722->> 216.155.139.182, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60622->> 216.155.131.118, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60606->> 216.155.131.119, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60647->> 209.222.3.227, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60717->> 216.155.139.187, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60594->> 216.155.144.201, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60611->> 216.155.139.189, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60774->> 216.155.139.185, 80 (from PPPoE1 Outbound)
01/25/2013 21:46:42 **TCP FIN Scan** 192.168.0.100, 60685->> 216.155.139.183, 80 (from PPPoE1 Outbound)
Torna in alto
 
cbbusto
Inviato: Saturday, January 26, 2013 10:29:50 AM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
La codifica più sicura è la WPA e puoi scegliere il server Radius, QUI trovi come configurare il router, come già detto io non sono un grande esperto in questo settore, attendi qualche altro amico più esperto che ti possa aiutare. Ciao
Torna in alto
 
xiandaniel
Inviato: Sunday, January 27, 2013 10:19:12 AM

Rank: AiutAmico

Iscritto dal : 9/28/2010
Posts: 82
Come vedi uso WPA2 personal.

Radius... e che indirizzo ci devo mettere? E server password? Quella pagina non dice nulla su questo
Torna in alto
 
Utenti presenti in questo topic
Guest

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » Contollo del log di hijack this per favore


Salta al Forum
Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Main Forum RSS : RSS

Aiutamici Theme
Powered by Yet Another Forum.net versione 1.9.1.8 (NET v2.0) - 3/29/2008
Copyright © 2003-2008 Yet Another Forum.net. All rights reserved.