Newsgroup: it.comp.os.win.xp
Titolo: Processo nascosto genera attività ipv6

Salve,
utilizzando il comodo port explorer, ho individuato alcuni processi
senza nome che generano traffico su protocollo ipv6.
Qualcuno ha qualche idea?
Ciao e grazie in anticipo
Alex

A< 

Provo a fare il copia incolla dal log (google groups non supporta
l'upload di files !?!?), speriamo sia leggibile copiandolo e
incollandolo sul notepad con un carattere tipo courier:
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
|                   NAME                   |     CREATION     |   PID
| PROTOCOL | LOCAL ADDRESS | LOCAL PORT | REMOTE ADDRESS | REMOTE PORT
| PORT STATUS |            SENT            |              RECVD
     |
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
|                                          | 14:32 25/01/2006 |  71680
|   Other  |    0.0.0.0    |    4       |   1.192.168.2  |    14080
|             | 0.00KB/s (1078.00KB Total) |   0.00KB/s (1162.00KB
Total)    |
|                                          | 14:32 25/01/2006 | 135168
|   Other  |    0.0.0.0    |    121     |     0.0.0.0    |    0
|             |   0.00KB/s (0.00KB Total)  |     0.00KB/s (0.00KB
Total)     |
|                                          | 14:32 25/01/2006 | 318464
|   Other  |    0.0.0.0    |    1       |     0.0.0.0    |    0
|             |   0.00KB/s (0.00KB Total)  |     0.00KB/s (0.00KB
Total)     |
|                                          | 14:32 25/01/2006 | 318464
|   Other  |    0.0.0.0    |    17      |     0.0.0.0    |    0
|             |   0.00KB/s (0.00KB Total)  |     0.00KB/s (0.00KB
Total)     |
|                                          | 14:32 25/01/2006 | 408576
|   Other  |  0.192.168.2  |    1536    |     0.0.0.0    |    0
|             |   0.00KB/s (0.00KB Total)  |     0.00KB/s (0.00KB
Total)     |
|                                          | 14:32 25/01/2006 | 408576
|   Other  |   0.127.0.0   |    256     |     0.0.0.0    |    0
|             |   0.00KB/s (0.00KB Total)  |     0.00KB/s (0.00KB
Total)     |
|                                          | 14:33 25/01/2006 | 408576
|   Other  |    0.0.0.0    |    62      |     0.0.0.0    |    0
|             |   0.00KB/s (0.00KB Total)  |     0.00KB/s (0.00KB
Total)     |
|                                          | 14:34 25/01/2006 | 421888
|   Other  |    0.0.0.0    |    4       |  1.212.103.204 |    1024
|             |  0.00KB/s (17.50KB Total)  |    0.00KB/s (136.00KB
Total)    |
|                                          | 14:33 25/01/2006 | 449536
|   Other  |   0.127.0.0   |    263     |     0.0.0.0    |    0
|             |   0.00KB/s (0.00KB Total)  |     0.00KB/s (0.00KB
Total)     |
|                                          | 14:33 25/01/2006 | 449536
|   Other  |  0.192.168.2  |    1543    |     0.0.0.0    |    0
|             |   0.00KB/s (0.00KB Total)  |     0.00KB/s (0.00KB
Total)     |
|                                          | 14:32 25/01/2006 | 552960
|   Other  |   0.127.0.0   |    260     |     0.0.0.0    |    0
|             |   0.00KB/s (0.00KB Total)  |     0.00KB/s (0.00KB
Total)     |
|                                          | 15:06 25/01/2006 | 822272
|   Other  |    0.0.0.0    |    4       |     0.0.0.0    |    0
|             |   0.00KB/s (0.00KB Total)  |     0.00KB/s (0.00KB
Total)     |
|                                          | 15:06 25/01/2006 | 822272
|   Other  |  0.192.168.2  |    1582    |   1.192.168.2  |    1543
|             |  0.00KB/s (795.00KB Total) |     0.00KB/s (0.00KB
Total)     |
|                                          | 15:58 25/01/2006 | 822273
|   Other  |  0.192.168.2  |    1543    |  1.207.68.178  |    4096
|             |  0.00KB/s (125.50KB Total) |    0.00KB/s (515.25KB
Total)    |
|                                          | 15:06 25/01/2006 | 822273
|   Other  |   0.127.0.0   |    260     |    1.127.0.0   |    260
|             |   0.00KB/s (6.25KB Total)  |     0.00KB/s (6.25KB
Total)     |
|                                          | 15:05 25/01/2006 | 822273
|   Other  |  0.192.168.2  |    1540    |   1.207.46.4   |    12039
|             |  0.00KB/s (385.50KB Total) |   0.00KB/s (2052.25KB
Total)    |
|                                          | 15:06 25/01/2006 | 822273
|   Other  |  0.192.168.2  |    1540    |   1.65.54.239  |    21504
|             |  0.00KB/s (225.00KB Total) |   0.00KB/s (5020.75KB
Total)    |
|                                          | 17:02 25/01/2006 | 904193
|   Other  |  0.192.168.2  |    1543    |  1.212.162.68  |    6400
|             |  0.00KB/s (99.00KB Total)  | 6944.00KB/s (87102.75KB
Total)  |
|                                          | 17:02 25/01/2006 | 904193
|   Other  |  0.192.168.2  |    1543    |  1.212.162.69  |    29186
|             |  0.00KB/s (527.50KB Total) | 2281.25KB/s (600682.25KB
Total) |
|                                          | 17:02 25/01/2006 | 922625
|   Other  |   0.127.0.0   |    263     |    1.127.0.0   |    263
|             |  0.25KB/s (166.00KB Total) |     0.00KB/s (0.00KB
Total)     |
|                                          | 17:02 25/01/2006 | 922625
|   Other  |  0.192.168.2  |    1543    |   1.66.102.9   |    37632
|             |  0.00KB/s (179.50KB Total) |    0.25KB/s (137.25KB
Total)    |
|                                          | 17:02 25/01/2006 | 922625
|   Other  |  0.192.168.2  |    1543    |   1.66.102.9   |    25344
|             |  0.00KB/s (132.50KB Total) |   0.25KB/s (1175.75KB
Total)    |
|                                          | 17:03 25/01/2006 | 922625
|   Other  |  0.192.168.2  |    1544    |  1.64.233.167  |    37632
|             |  0.00KB/s (256.75KB Total) |    0.25KB/s (60.50KB
Total)     |
|                                          | 17:02 25/01/2006 | 922625
|   Other  |  0.192.168.2  |    1543    |   1.80.87.16   |    2304
|             |  0.00KB/s (98.00KB Total)  |   0.25KB/s (31929.50KB
Total)   |
|                                          | 17:02 25/01/2006 | 922625
|   Other  |  0.192.168.2  |    1543    |  1.193.70.192  |    14592
|             | 0.00KB/s (1960.00KB Total) |   0.00KB/s (23530.50KB
Total)   |
|                                          | 17:02 25/01/2006 | 922625
|   Other  |  0.192.168.2  |    1543    |   1.66.102.11  |    24576
|             |  0.00KB/s (109.75KB Total) |    0.25KB/s (116.50KB
Total)    |
|                                          | 17:02 25/01/2006 | 922625
|   Other  |  0.192.168.2  |    1543    |  1.195.210.91  |    19712
|             |  0.00KB/s (117.00KB Total) |   0.00KB/s (11616.25KB
Total)   |
|                                          | 17:02 25/01/2006 | 922625
|   Other  |  0.192.168.2  |    1543    |  1.212.239.41  |    25856
|             |  0.00KB/s (135.75KB Total) |    0.00KB/s (101.25KB
Total)    |
|                                          | 17:03 25/01/2006 | 922625
|   Other  |  0.192.168.2  |    1544    |  1.193.70.192  |    14592
|             | 0.00KB/s (5433.50KB Total) |   0.00KB/s (45843.75KB
Total)   |
|                                          | 17:02 25/01/2006 | 922625
|   Other  |  0.192.168.2  |    1543    |   1.62.85.163  |    12032
|             |  0.00KB/s (149.00KB Total) |   0.00KB/s (4458.25KB
Total)    |
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Come si nota, la colonna name è vuota ed è stato questo a destare il
mio sospetto, questi processi non sono visibili nel task manager, e
notate che hanno tutti un id molto alto.
Postate le vs. riflessioni gente.
Ciao e grazie

Mi scuso per la confusione del mio post precedente; questo è l'elenco
degli ip e le porte remote del traffico generato da alcuni processi non
visibili in task manager:
1.82.51.21:5138
1.83.36.61:50954
1.85.168.114:16627
1.70.82.170:16363
1.151.37.148:61970
1.80.182.119:22826
1.151.49.255:49938
1.82.252.104:63744
1.83.203.240:58898
1.84.97.27:10514
1.83.154.165:13074
1.82.224.225:1050
1.85.30.226:46052
1.82.53.54:21882
1.83.205.159:39695
1.151.38.57:29458
1.151.52.109:60434
1.84.173.233:25618
1.84.59.195:21002
1.84.4.161:35858
1.200.122.52:58646
1.87.10.139:19986
1.62.94.94:46358
1.151.42.236:10246
Ciao
Alex