guardate quante porte aperte!!!!

[mblara75]

come è possibile???? quale virus può fare questo??

445 UDP System 0.0.0.0 00.53.55
445 TCP System 0.0.0.0 00.53.55
1026 TCP System 0.0.0.0 00.53.03
138 UDP System 192.168.10.220 00.51.43
137 UDP System 192.168.10.220 00.51.43
139 TCP System 192.168.10.220 00.51.43
138 UDP System 87.20.69.73 00.46.49
137 UDP System 87.20.69.73 00.46.49
139 TCP System 87.20.69.73 00.46.49
135 TCP SVCHOST.EXE -K RPCSS 87.20.69.73 00.53.41
1025 TCP MSTASK.EXE 0.0.0.0 00.53.36
1110 TCP AVP.EXE -R 127.0.0.1 00.52.59
1397 TCP AVP.EXE -R 0.0.0.0 00.05.36
1403 TCP AVP.EXE -R 0.0.0.0 00.05.35
1414 TCP AVP.EXE -R 0.0.0.0 00.05.19
1423 TCP AVP.EXE -R 0.0.0.0 00.02.57
1429 TCP AVP.EXE -R 0.0.0.0 00.01.49
1433 TCP AVP.EXE -R 0.0.0.0 00.01.44
1437 TCP AVP.EXE -R 0.0.0.0 00.01.37
500 UDP LSASS.EXE 192.168.10.220 00.51.43
500 UDP LSASS.EXE 87.20.69.73 00.46.49
1269 TCP MSNMSGR.EXE 0.0.0.0 00.21.09
1270 UDP MSNMSGR.EXE 127.0.0.1 00.21.07
9 UDP MSNMSGR.EXE 87.20.69.73 00.20.48
1391 TCP FIREFOX.EXE 127.0.0.1 00.05.47
1392 TCP FIREFOX.EXE 0.0.0.0 00.05.45
1393 TCP FIREFOX.EXE 127.0.0.1 00.05.39
1394 TCP FIREFOX.EXE 0.0.0.0 00.05.39
1396 TCP FIREFOX.EXE 127.0.0.1 00.05.36
1402 TCP FIREFOX.EXE 127.0.0.1 00.05.35
1413 TCP FIREFOX.EXE 127.0.0.1 00.05.19
1422 TCP FIREFOX.EXE 127.0.0.1 00.02.57
1428 TCP FIREFOX.EXE 127.0.0.1 00.01.49
1432 TCP FIREFOX.EXE 127.0.0.1 00.01.44
1436 TCP FIREFOX.EXE 127.0.0.1 00.01.37

[mblara75]

e guardate il traffico (log di Kaspersky).....ci sono delle cose secondo me impossibili..si deve per forza trattare di un trojan...ma non si riesce a risolvere.....chi mi sa aiutare??


host87-62-dynamic.20-87-r.retail.telecomitalia.it 87.20.62.87 490 byte 340 byte
70.42.134.12 70.42.134.12 1.4 Kb 5.2 Kb
host176-234-dynamic.19-87-r.retail.telecomitalia.it 87.19.234.176 830 byte 603 byte
1.1.1.1 1.1.1.1 324 byte 3.2 Kb
host94-60-dynamic.20-87-r.retail.telecomitalia.it 87.20.60.94 936 byte 1 Kb
213.199.159.203 213.199.159.203 1.6 Kb 3.2 Kb
209.85.129.96 209.85.129.96 1.2 Kb 4.5 Kb
host98-59-dynamic.20-87-r.retail.telecomitalia.it 87.20.59.98 62 byte 54 byte
host218-198-dynamic.20-87-r.retail.telecomitalia.it 87.20.198.218 312 byte 216 byte
213.199.159.208 213.199.159.208 48 Kb 5.4 Kb
host194-222-dynamic.20-87-r.retail.telecomitalia.it 87.20.222.194 372 byte 324 byte
mu-in-f96.google.com 209.85.135.96 1 Kb 1.3 Kb
tm.net.my 60.52.9.150 208 byte 140 byte
209.85.129.104 209.85.129.104 222.5 Kb 44.8 Kb
mu-in-f99.google.com 209.85.135.99 13.9 Kb 1.9 Kb
host103-62-dynamic.20-87-r.retail.telecomitalia.it 87.20.62.103 558 byte 486 byte
66.150.208.106 66.150.208.106 4.3 Kb 7.9 Kb
c.msn.com 207.46.216.62 870 byte 861 byte
209.85.135.103 209.85.135.103 19.7 Kb 10.3 Kb
mu-in-f104.google.com 209.85.135.104 14.5 Kb 3.7 Kb
66.102.7.104 66.102.7.104 684 byte 2.8 Kb
echo-v1.msgr.hotmail.com 64.4.12.200 62 byte 124 byte
ALille-257-1-184-78.w90-1.abo.wanadoo.fr 90.1.111.78 372 byte 324 byte
host206-226-dynamic.19-87-r.retail.telecomitalia.it 87.19.226.206 830 byte 549 byte
host107-71-dynamic.20-87-r.retail.telecomitalia.it 87.20.71.107 260 byte 236 byte
219.137.59.126 219.137.59.126 104 byte 1.1 Kb
server1.quantserve.com 64.34.179.10 4.9 Kb 4.5 Kb
login.live.com 65.54.179.248 2.7 Kb 1.4 Kb
dyna-addons.nslb.sj.mozilla.com 63.245.209.31 5.0 Kb 1.5 Kb
host179-7-dynamic.20-87-r.retail.telecomitalia.it 87.20.7.179 372 byte 324 byte
213.144.186.7 213.144.186.7 352.3 Kb 69.4 Kb
host49-140-dynamic.20-87-r.retail.telecomitalia.it 87.20.140.49 864 byte 1.1 Kb
host94-97-dynamic.20-87-r.retail.telecomitalia.it 87.20.97.94 490 byte 400 byte
host96-97-dynamic.20-87-r.retail.telecomitalia.it 87.20.97.96 984 byte 1 Kb
87.96.172.201 87.96.172.201 436 byte 1.2 Kb
host27-171-dynamic.16-87-r.retail.telecomitalia.it 87.16.171.27 156 byte 108 byte
host17-151.pool8251.interbusiness.it 82.51.151.17 984 byte 1 Kb
waddi.requin.jmsp.net 212.23.177.147 1.9 Kb 1.7 Kb
ilapi.ebay.com 66.135.195.164 7.4 Kb 2.1 Kb
65.54.239.210 65.54.239.210 604 byte 1.6 Kb
209.85.129.147 209.85.129.147 511.4 Kb 118.2 Kb
adamo144.supereva.it 195.110.126.144 2.6 Kb 575 byte
209.85.135.147 209.85.135.147 872 byte 1.9 Kb
host68-149-dynamic.20-87-r.retail.telecomitalia.it 87.20.149.68 124 byte 108 byte
tm.net.my 218.111.149.104 208 byte 140 byte
193.238.213.198 193.238.213.198 104 byte 1.1 Kb
host57-169-dynamic.20-87-r.retail.telecomitalia.it 87.20.169.57 374 byte 398 byte
favorites.live.com 207.46.213.123 2.5 Kb 455 byte
host250-232-dynamic.20-87-r.retail.telecomitalia.it 87.20.232.250 1.3 Kb 1.3 Kb
host219-8-dynamic.20-87-r.retail.telecomitalia.it 87.20.8.219 936 byte 1 Kb
host76-154-dynamic.20-87-r.retail.telecomitalia.it 87.20.154.76 1.2 Kb 1.1 Kb
host56-188-dynamic.10-87-r.retail.telecomitalia.it 87.10.188.56 186 byte 162 byte
by2msg2243412.phx.gbl 207.46.27.65 35.8 Kb 8.4 Kb
host250-244-dynamic.20-87-r.retail.telecomitalia.it 87.20.244.250 124 byte 108 byte
host5-233-dynamic.20-87-r.retail.telecomitalia.it 87.20.233.5 156 byte 108 byte
g.zedo.com 64.41.197.44 820 byte 806 byte
198-166-155-85.user.auna.net 85.155.166.198 104 byte 70 byte
61.51.178.58 61.51.178.58 348 byte 1.3 Kb
host49-194-dynamic.20-87-r.retail.telecomitalia.it 87.20.194.49 372 byte 324 byte
. 208.53.159.190 311.2 Kb 18.9 Kb
tm.net.my 218.111.51.230 208 byte 140 byte
aark71.neoplus.adsl.tpnet.pl 83.5.196.71 152 byte 150 byte
204.16.208.183 204.16.208.183 1.7 Kb 1.3 Kb
host201-49-dynamic.19-87-r.retail.telecomitalia.it 87.19.49.201 984 byte 1 Kb
81.29.194.52 81.29.194.52 3.1 Kb 2.1 Kb
snapfiles.com 8.10.179.160 193.2 Kb 54.9 Kb
115-199-218-83.globnet.md 83.218.199.115 104 byte 70 byte
8.10.179.164 8.10.179.164 164.2 Kb 15.1 Kb
8.10.179.165 8.10.179.165 8 Kb 7.2 Kb
host202-54-dynamic.20-87-r.retail.telecomitalia.it 87.20.54.202 264 byte 234 byte
host162-96-dynamic.20-87-r.retail.telecomitalia.it 87.20.96.162 984 byte 1 Kb
host220-5-dynamic.59-82-r.retail.telecomitalia.it 82.59.5.220 186 byte 162 byte
host36-224-dynamic.20-87-r.retail.telecomitalia.it 87.20.224.36 740 byte 680 byte
64.34.8.7 64.34.8.7 3.3 Kb 2.2 Kb
host80-182-dynamic.20-87-r.retail.telecomitalia.it 87.20.182.80 3 Kb 2.6 Kb
by2msg2263516.phx.gbl 207.46.27.90 36.0 Kb 39.7 Kb
http://www.mini.it 194.185.176.72 994 byte 570 byte
host10-1-dynamic.20-87-r.retail.telecomitalia.it 87.20.1.10 830 byte 603 byte
box.tin.it 62.211.72.30 135 Kb 4.3 Kb
bb220-255-74-85.singnet.com.sg 220.255.74.85 208 byte 140 byte
65.54.239.24 65.54.239.24 32.2 Kb 5 Kb
EATcf-699p156.ppp15.odn.ne.jp 220.212.55.156 208 byte 140 byte
81.12.38.4 81.12.38.4 74 byte 1.7 Kb
194.244.5.206 194.244.5.206 34.3 Kb 4.3 Kb
72.14.217.91 72.14.217.91 608 byte 2.7 Kb
host47-241-dynamic.20-87-r.retail.telecomitalia.it 87.20.241.47 14.0 Kb 17.6 Kb
72.14.217.93 72.14.217.93 364 byte 2.0 Kb
ns4.tin.it 212.216.112.112 22 Kb 6.4 Kb
host60-230-dynamic.20-87-r.retail.telecomitalia.it 87.20.230.60 984 byte 1 Kb
198.104.150.202 198.104.150.202 298.3 Kb 56.7 Kb
cpc2-shep1-0-0-cust888.leic.cable.ntl.com 81.107.95.121 208 byte 140 byte
ns1.tin.it 212.216.172.62 30.8 Kb 14.5 Kb
host22-27-dynamic.20-87-r.retail.telecomitalia.it 87.20.27.22 936 byte 1 Kb
62.149.128.73 62.149.128.73 159.0 Kb 10.5 Kb
host166-140-dynamic.20-87-r.retail.telecomitalia.it 87.20.140.166 1.6 Kb 1.8 Kb
host230-76-dynamic.20-87-r.retail.telecomitalia.it 87.20.76.230 12.1 Kb 18 Kb
host61-247-dynamic.20-87-r.retail.telecomitalia.it 87.20.247.61 1.5 Kb 1.5 Kb
lma574.siteprotect.com 64.41.127.187 525.6 Kb 92.6 Kb
host217-103-dynamic.20-87-r.retail.telecomitalia.it 87.20.103.217 434 byte 392 byte
server2-punto-betting.it.net 151.1.140.137 1.8 Kb 554 byte
by1msg5246615.phx.gbl 207.46.109.68 22.3 Kb 12.5 Kb
host200-127-dynamic.19-87-r.retail.telecomitalia.it 87.19.127.200 1.5 Kb 1.5 Kb
222.136.169.167 222.136.169.167 208 byte 1.2 Kb
220-143-247-92.dynamic.hinet.net 220.143.247.92 76 byte 75 byte
host119-222-dynamic.20-87-r.retail.telecomitalia.it 87.20.222.119 258 byte 228 byte
host155-194-dynamic.20-87-r.retail.telecomitalia.it 87.20.194.155 1 Kb 1.4 Kb
111-149-118-80.kaptech.net 80.118.149.111 1.7 Kb 2 Kb
host4-105-dynamic.7-87-r.retail.telecomitalia.it 87.7.105.4 156 byte 108 byte
192.168.100.1 192.168.100.1 5.8 Kb 1 Kb
host147-213-dynamic.16-87-r.retail.telecomitalia.it 87.16.213.147 2.7 Kb 2.2 Kb
140.211.166.205 140.211.166.205 6.1 Kb 2.7 Kb
microsofteu-1-uk-lon7.lon.seabone.net 195.22.209.42 1.8 Kb 0 byte
207.68.178.16 207.68.178.16 13.9 Kb 4.9 Kb
host213-149-dynamic.20-87-r.retail.telecomitalia.it 87.20.149.213 13.5 Kb 16.4 Kb
host198-8-static.184-82-b.business.telecomitalia.it 82.184.8.198 70 byte 0 byte
http://www.qksrv.net 216.34.209.13 820 byte 766 byte
host155-214-dynamic.20-87-r.retail.telecomitalia.it 87.20.214.155 888 byte 648 byte
host82-33-dynamic.20-87-r.retail.telecomitalia.it 87.20.33.82 1.2 Kb 1.1 Kb
213.199.159.168 213.199.159.168 2.6 Kb 4.8 Kb
http://www.ciao.it 194.112.113.69 76.3 Kb 10 Kb
host159-223-dynamic.20-87-r.retail.telecomitalia.it 87.20.223.159 186 byte 162 byte
omniture.112.2o7.net 216.52.17.206 2.9 Kb 3.2 Kb
images.ciao.com 194.112.113.75 53.3 Kb 18.6 Kb
213.217.233.91 213.217.233.91 104 byte 4.4 Kb
58.41.9.135 58.41.9.135 208 byte 4.4 Kb
66.249.85.99 66.249.85.99 684 byte 4.5 Kb
http://www.ciao.de 194.112.113.80 1.4 Kb 683 byte
host244-149-dynamic.20-87-r.retail.telecomitalia.it 87.20.149.244 1.8 Kb 1.6 Kb
124.29.20.71 124.29.20.71 312 byte 4.5 Kb
host170-224-dynamic.20-87-r.retail.telecomitalia.it 87.20.224.170 186 byte 162 byte
h217-220-32-32.albacom.net.32.220.217.in-addr.arpa 217.220.32.32 192.4 Kb 25.7 Kb
ug-in-f93.google.com 66.249.93.93 1.4 Mb 42 Kb
cpe2-27-244.cable.triera.net 82.149.27.244 124 byte 108 byte
host47-92-dynamic.20-87-r.retail.telecomitalia.it 87.20.92.47 372 byte 324 byte
http://www.01net.it 217.18.101.168 13.8 Kb 1.5 Kb
host47-97-dynamic.20-87-r.retail.telecomitalia.it 87.20.97.47 186 byte 162 byte
207.46.219.35 207.46.219.35 3.2 Kb 9 Kb