Newsgroup: it.comp.sicurezza.windows
Titolo: strani cambiamenti

Ciao ragazzi,
ho appena fatto una scansione con AVG e mi dice che i file ntoskrnl, user32, 
shell32, kernel32 e il MBR sono "change".
Come mairisultano cambiamenti su questi file?
Potrei essere vittima di qualcosa?
grazie

Vi invio anche il log file di HiJackThis
Logfile of HijackThis v1.99.1
Scan saved at 12.12.39, on 05/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Documents and Settings\Telemaco78\Desktop\Sicurezza\nmap\bin\nmapserv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programmi\CyberLink\Shared files\RichVideo.exe
C:\Programmi\Sygate\SPF\smc.exe
C:\Documents and Settings\Telemaco78\Desktop\Sicurezza\Nessus\nessusd.exe
C:\Programmi\HDSL640 USB ADSL Modem\CnxDslTb.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programmi\DAP\DAP.EXE
C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Programmi\CyberLink\PowerDVD\PDVDServ.exe
C:\DOCUME~1\TELEMA~1\IMPOST~1\Temp\Rar$EX00.250\CheckBO.exe
C:\Programmi\Java\jre1.5.0_09\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Creative\SBAudigy\TaskBar\CTLTray.exe
C:\Programmi\Creative\SBAudigy\TaskBar\CTLTask.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programmi\Outlook Express\msimn.exe
C:\Programmi\Messenger\msmsgs.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\Programmi\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\Downloaded Program Files\SpSubRx.exe
C:\Programmi\Creative\SBAudigy\SurMix2\SurMix2.exe
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\Programmi\eMule\emule.exe
C:\Programmi\WinRAR\WinRAR.exe
C:\Programmi\WinRAR\WinRAR.exe
C:\DOCUME~1\TELEMA~1\IMPOST~1\Temp\Rar$EX00.094\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
http://www.google.it/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
Collegamenti
R3 - URLSearchHook: (no name) - {D73F49B6-B51B-4d32-A3B7-BD04B8342F53} - 
C:\Programmi\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL
O2 - BHO: Adobe PDF Reader Link Helper - 
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 
7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: MorpheusToolbar BHO - {3F3714A1-89A4-46be-8AF3-D0C9D1FB03F9} - 
C:\Programmi\MorpheusBar\bar\1.bin\MORPHBAR.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - 
C:\Programmi\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: (no name) - {D73F49B1-B51B-4d32-A3B7-BD04B8342F53} - 
C:\Programmi\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - 
C:\Programmi\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Morpheus Toolbar - {3F3714A9-89A4-46be-8AF3-D0C9D1FB03F9} - 
C:\Programmi\MorpheusBar\bar\1.bin\MORPHBAR.DLL
O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Programmi\HDSL640 USB ADSL 
Modem\CnxDslTb.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [Jet Detection] 
C:\Programmi\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE 
C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE 
C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Easy-PrintToolBox] 
C:\Programmi\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Programmi\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programmi\Grisoft\AVG Anti-Spyware 
7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [RemoteControl] 
C:\Programmi\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] 
C:\Programmi\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [CheckBO] 
C:\DOCUME~1\TELEMA~1\IMPOST~1\Temp\Rar$EX00.250\CheckBO.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] 
"C:\Programmi\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TaskTray] 
C:\Programmi\Creative\SBAudigy\TaskBar\CTLTray.exe
O4 - HKCU\..\Run: [TaskBar] 
C:\Programmi\Creative\SBAudigy\TaskBar\CTLTask.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\MSN Messenger\MsnMsgr.Exe" 
/background
O4 - HKCU\..\Run: [Privacy Eraser Pro] C:\Programmi\PrivacyEraser 
Computing\Privacy Eraser Pro\PrivacyEraser.exe /Startup
O4 - HKCU\..\Run: [Skype] "C:\Programmi\Skype\Phone\Skype.exe" /nosplash 
/minimized
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Programmi\eMule\emule.exe -AutoStart
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = 
C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft 
Office\Office10\OSA.EXE
O8 - Extra context menu item: &Clean Traces - C:\Programmi\DAP\Privacy 
Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - 
C:\Programmi\DAP\dapextie.htm
O8 - Extra context menu item: Aggiungi all'elenco di stampa Easy-WebPrint - 
res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Anteprima Easy-WebPrint - 
res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Download &all with DAP - 
C:\Programmi\DAP\dapextie2.htm
O8 - Extra context menu item: E&sporta in Microsoft Excel - 
res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: E&xport to Microsoft Excel - 
res://C:\PROGRA~1\MICROS~2\OFFICE12\EXCEL.EXE/3000
O8 - Extra context menu item: Stampa ad alta velocità Easy-WebPrint - 
res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Stampa Easy-WebPrint - 
res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - 
C:\Documents and Settings\Telemaco78\Desktop\Sicurezza\VisualRoute\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - 
{04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\Documents and 
Settings\Telemaco78\Desktop\Sicurezza\VisualRoute\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - 
C:\Programmi\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - 
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - 
C:\Programmi\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - 
C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - 
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - 
http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O17 - 
HKLM\System\CCS\Services\Tcpip\..\{5F84E5E0-36DC-4BE9-8200-5522E8160DCE}: 
NameServer = 85.37.17.17 85.38.28.72
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - 
C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - 
C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - 
C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - 
C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - 
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - 
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - 
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: NMap - Unknown owner - C:\Documents and 
Settings\Telemaco78\Desktop\Sicurezza\nmap\bin\nmapserv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - 
C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown 
owner - C:\Programmi\CyberLink\Shared files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - 
Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f 
"%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate 
Technologies, Inc. - C:\Programmi\Sygate\SPF\smc.exe
O23 - Service: Tenable Nessus - Tenable Network Security - C:\Documents and 
Settings\Telemaco78\Desktop\Sicurezza\Nessus\nessusd.exe

E aggiungo i lrisultato del netstat
Connessioni attive
  Proto  Indirizzo locale       Indirizzo esterno       Stato
  TCP    
0.0.0.0:135
 
0.0.0.0:0
              LISTENING
  TCP    
0.0.0.0:445
 
0.0.0.0:0
              LISTENING
  TCP    
0.0.0.0:1243
 
0.0.0.0:0
              LISTENING
  TCP    
0.0.0.0:6713
 
0.0.0.0:0
              LISTENING
  TCP    
0.0.0.0:12345
 
0.0.0.0:0
              LISTENING
  TCP    
0.0.0.0:12346
 
0.0.0.0:0
              LISTENING
  TCP    
0.0.0.0:20034
 
0.0.0.0:0
              LISTENING
  TCP    
0.0.0.0:31337
 
0.0.0.0:0
              LISTENING
  TCP    
0.0.0.0:31666
 
0.0.0.0:0
              LISTENING
  TCP    
0.0.0.0:47984
 
0.0.0.0:0
              LISTENING
  TCP    
0.0.0.0:54320
 
0.0.0.0:0
              LISTENING
  TCP    
82.53.150.179:135
 
82.50.191.64:3011
      ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.6.119:3728
       ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.20.139:2972
      ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.24.77:51829
      ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.55.192:3093
      ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.55.192:4615
      ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.69.83:4246
       ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.69.83:4548
       ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.113.156:2629
     ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.113.156:2658
     ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.134.227:4689
     ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.137.91:1486
      ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.142.117:1339
     ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.142.117:20495
    ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.161.20:4896
      ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.165.99:2478
      ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.179.93:3804
      ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.253.121:3625
     ESTABLISHED
  TCP    
82.53.150.179:135
 
82.53.253.121:3779
     ESTABLISHED
  TCP    
82.53.150.179:135
 
82.55.200.149:4405
     ESTABLISHED
  TCP    
82.53.150.179:135
 
83.21.74.93:60526
      ESTABLISHED
  TCP    
82.53.150.179:135
 
87.3.152.11:4402
       TIME_WAIT
  TCP    
82.53.150.179:135
 
87.6.82.180:43264
      ESTABLISHED
  TCP    
82.53.150.179:135
 
87.11.160.128:2241
     ESTABLISHED
  TCP    
82.53.150.179:1038
 
195.31.190.163:119
     ESTABLISHED
  TCP    
82.53.150.179:1143
 
85.186.159.9:3000
      TIME_WAIT
  TCP    
82.53.150.179:1150
 
89.138.58.31:4662
      TIME_WAIT
  TCP    
82.53.150.179:1155
 
87.21.73.75:27531
      TIME_WAIT
  TCP    
82.53.150.179:1157
 
213.22.232.25:4662
     TIME_WAIT
  TCP    
82.53.150.179:1177
 
151.46.234.122:14712
   TIME_WAIT
  TCP    
82.53.150.179:1178
 
87.17.67.134:1755
      TIME_WAIT
  TCP    
82.53.150.179:1180
 
87.21.122.27:4662
      TIME_WAIT
  TCP    
82.53.150.179:1181
 
87.6.55.62:4662
        TIME_WAIT
  TCP    
82.53.150.179:1185
 
87.6.101.146:4662
      TIME_WAIT
  TCP    
82.53.150.179:1197
 
83.184.230.150:4662
    TIME_WAIT
  TCP    
82.53.150.179:1205
 
213.22.182.100:8881
    TIME_WAIT
  TCP    
82.53.150.179:1206
 
219.66.168.85:4662
     TIME_WAIT
  TCP    
82.53.150.179:1208
 
89.212.23.114:4662
     LAST_ACK
  TCP    
82.53.150.179:1215
 
82.131.52.138:4662
     TIME_WAIT
  TCP    
82.53.150.179:1222
 
60.250.192.106:4662
    TIME_WAIT
  TCP    
82.53.150.179:1224
 
84.229.228.179:4662
    TIME_WAIT
  TCP    
82.53.150.179:1226
 
82.166.208.187:25657
   FIN_WAIT_1
  TCP    
82.53.150.179:1228
 
89.180.0.60:10000
      TIME_WAIT
  TCP    
82.53.150.179:1236
 
85.128.16.150:4662
     TIME_WAIT
  TCP    
82.53.150.179:1238
 
193.2.252.82:4662
      TIME_WAIT
  TCP    
82.53.150.179:1239
 
213.36.26.29:4662
      TIME_WAIT
  TCP    
82.53.150.179:1245
 
76.21.116.243:22193
    TIME_WAIT
  TCP    
82.53.150.179:1247
 
196.217.62.190:4662
    TIME_WAIT
  TCP    
82.53.150.179:1250
 
196.207.234.195:17562
  TIME_WAIT
  TCP    
82.53.150.179:1251
 
62.14.116.131:4662
     TIME_WAIT
  TCP    
82.53.150.179:1254
 
201.208.35.153:10012
   TIME_WAIT
  TCP    
82.53.150.179:1255
 
201.67.179.104:5041
    TIME_WAIT
  TCP    
82.53.150.179:1257
 
189.168.7.48:4669
      TIME_WAIT
  TCP    
82.53.150.179:1260
 
84.2.171.107:4662
      TIME_WAIT
  TCP    
82.53.150.179:1262
 
193.126.63.79:4662
     TIME_WAIT
  TCP    
82.53.150.179:1263
 
82.52.72.174:4662
      TIME_WAIT
  TCP    
82.53.150.179:1264
 
87.218.239.170:4662
    TIME_WAIT
  TCP    
82.53.150.179:1267
 
87.217.161.254:4662
    TIME_WAIT
  TCP    
82.53.150.179:1274
 
83.41.231.61:4662
      TIME_WAIT
  TCP    
82.53.150.179:1279
 
82.139.145.202:4662
    TIME_WAIT
  TCP    
82.53.150.179:1283
 
89.129.40.86:4662
      TIME_WAIT
  TCP    
82.53.150.179:1294
 
82.52.110.200:4662
     TIME_WAIT
  TCP    
82.53.150.179:1301
 
87.3.203.86:62042
      ESTABLISHED
  TCP    
82.53.150.179:1302
 
87.4.168.247:4662
      TIME_WAIT
  TCP    
82.53.150.179:1304
 
151.44.141.111:4662
    TIME_WAIT
  TCP    
82.53.150.179:1307
 
87.4.251.202:4662
      TIME_WAIT
  TCP    
82.53.150.179:1313
 
88.3.51.162:24534
      TIME_WAIT
  TCP    
82.53.150.179:1314
 
83.237.57.255:4662
     TIME_WAIT
  TCP    
82.53.150.179:1317
 
83.190.196.114:8165
    TIME_WAIT
  TCP    
82.53.150.179:1318
 
82.252.182.81:4662
     TIME_WAIT
  TCP    
82.53.150.179:1321
 
201.2.231.139:4662
     CLOSING
  TCP    
82.53.150.179:1322
 
85.69.131.11:29978
     TIME_WAIT
  TCP    
82.53.150.179:1323
 
121.44.42.83:1214
      TIME_WAIT
  TCP    
82.53.150.179:1324
 
59.115.2.253:4662
      TIME_WAIT
  TCP    
82.53.150.179:1325
 
88.123.51.107:6662
     FIN_WAIT_2
  TCP    
82.53.150.179:1326
 
211.21.196.26:4662
     TIME_WAIT
  TCP    
82.53.150.179:1328
 
212.183.232.144:4662
   TIME_WAIT
  TCP    
82.53.150.179:1329
 
82.254.207.175:4661
    TIME_WAIT
  TCP    
82.53.150.179:1331
 
82.254.180.152:4442
    TIME_WAIT
  TCP    
82.53.150.179:1332
 
82.67.14.205:4662
      TIME_WAIT
  TCP    
82.53.150.179:1333
 
85.137.5.56:4662
       TIME_WAIT
  TCP    
82.53.150.179:1336
 
24.186.160.213:1600
    TIME_WAIT
  TCP    
82.53.150.179:1337
 
88.154.219.190:4662
    TIME_WAIT
  TCP    
82.53.150.179:1339
 
59.115.157.102:15160
   TIME_WAIT
  TCP    
82.53.150.179:1340
 
83.154.81.132:4662
     TIME_WAIT
  TCP    
82.53.150.179:1342
 
83.173.170.104:9392
    TIME_WAIT
  TCP    
82.53.150.179:1345
 
201.27.163.1:4662
      TIME_WAIT
  TCP    
82.53.150.179:1350
 
80.102.163.47:7005
     TIME_WAIT
  TCP    
82.53.150.179:1351
 
83.37.218.251:4662
     TIME_WAIT
  TCP    
82.53.150.179:1354
 
81.249.158.14:4662
     TIME_WAIT
  TCP    
82.53.150.179:1357
 
168.226.207.205:4662
   TIME_WAIT
  TCP    
82.53.150.179:1358
 
200.186.179.113:4662
   TIME_WAIT
  TCP    
82.53.150.179:1359
 
213.37.191.94:4662
     TIME_WAIT
  TCP    
82.53.150.179:1360
 
88.76.218.129:4662
     TIME_WAIT
  TCP    
82.53.150.179:1362
 
81.33.67.243:55569
     TIME_WAIT
  TCP    
82.53.150.179:1364
 
82.81.39.239:9225
      TIME_WAIT
  TCP    
82.53.150.179:1365
 
80.178.205.244:6662
    TIME_WAIT
  TCP    
82.53.150.179:1374
 
87.6.146.195:4662
      ESTABLISHED
  TCP    
82.53.150.179:1375
 
213.164.99.174:21012
   TIME_WAIT
  TCP    
82.53.150.179:1379
 
91.76.118.230:12884
    TIME_WAIT
  TCP    
82.53.150.179:1380
 
80.38.9.76:4662
        ESTABLISHED
  TCP    
82.53.150.179:1385
 
90.18.188.205:4662
     ESTABLISHED
  TCP    
82.53.150.179:1389
 
90.7.72.217:25973
      ESTABLISHED
  TCP    
82.53.150.179:1392
 
82.51.21.217:4662
      ESTABLISHED
  TCP    
82.53.150.179:1393
 
87.91.163.218:6662
     ESTABLISHED
  TCP    
82.53.150.179:1394
 
83.39.104.64:4662
      ESTABLISHED
  TCP    
82.53.150.179:1395
 
83.54.79.142:4862
      ESTABLISHED
  TCP    
82.53.150.179:1398
 
81.33.152.129:4662
     ESTABLISHED
  TCP    
82.53.150.179:1403
 
87.18.108.232:31480
    ESTABLISHED
  TCP    
82.53.150.179:1404
 
84.120.225.127:4662
    ESTABLISHED
  TCP    
82.53.150.179:1405
 
83.184.164.105:4662
    ESTABLISHED
  TCP    
82.53.150.179:1412
 
84.77.34.218:4662
      ESTABLISHED
  TCP    
82.53.150.179:1413
 
80.171.80.133:4662
     ESTABLISHED
  TCP    
82.53.150.179:1414
 
87.9.133.30:29547
      ESTABLISHED
  TCP    
82.53.150.179:1419
 
85.155.213.118:4662
    ESTABLISHED
  TCP    
82.53.150.179:1420
 
87.4.180.60:4662
       ESTABLISHED
  TCP    
82.53.150.179:1424
 
88.8.197.109:4662
      ESTABLISHED
  TCP    
82.53.150.179:1425
 
87.90.168.33:4662
      ESTABLISHED
  TCP    
82.53.150.179:1429
 
84.77.63.16:4662
       ESTABLISHED
  TCP    
82.53.150.179:1430
 
213.37.78.202:4662
     ESTABLISHED
  TCP    
82.53.150.179:1431
 
76.169.120.207:2664
    ESTABLISHED
  TCP    
82.53.150.179:1432
 
193.111.247.61:32556
   ESTABLISHED
  TCP    
82.53.150.179:1438
 
83.130.203.226:4662
    SYN_SENT
  TCP    
82.53.150.179:1441
 
87.2.150.173:44390
     SYN_SENT
  TCP    
82.53.150.179:1442
 
62.195.58.240:24396
    ESTABLISHED
  TCP    
82.53.150.179:1446
 
151.53.221.84:1755
     ESTABLISHED
  TCP    
82.53.150.179:1447
 
89.0.22.121:4662
       SYN_SENT
  TCP    
82.53.150.179:1448
 
62.57.164.2:4662
       ESTABLISHED
  TCP    
82.53.150.179:1450
 
77.182.137.224:4662
    ESTABLISHED
  TCP    
82.53.150.179:1452
 
59.167.17.86:4662
      ESTABLISHED
  TCP    
82.53.150.179:1454
 
62.143.44.184:4662
     ESTABLISHED
  TCP    
82.53.150.179:1455
 
84.220.114.201:4662
    ESTABLISHED
  TCP    
82.53.150.179:1456
 
82.239.17.151:5662
     ESTABLISHED
  TCP    
82.53.150.179:1457
 
84.222.25.191:4662
     ESTABLISHED
  TCP    
82.53.150.179:1459
 
201.50.245.111:24144
   SYN_SENT
  TCP    
82.53.150.179:1460
 
83.200.245.98:4661
     SYN_SENT
  TCP    
82.53.150.179:1461
 
217.126.40.153:4664
    SYN_SENT
  TCP    
82.53.150.179:1462
 
89.100.104.119:4662
    SYN_SENT
  TCP    
82.53.150.179:1463
 
89.247.71.209:4661
     ESTABLISHED
  TCP    
82.53.150.179:1464
 
193.27.209.8:6468
      SYN_SENT
  TCP    
82.53.150.179:1465
 
83.203.243.105:4662
    ESTABLISHED
  TCP    
82.53.150.179:1466
 
88.121.64.47:4662
      ESTABLISHED
  TCP    
82.53.150.179:1467
 
193.17.54.75:4662
      SYN_SENT
  TCP    
82.53.150.179:4179
 
207.46.107.93:1863
     ESTABLISHED
  TCP    
82.53.150.179:4187
 
195.22.198.30:80
       CLOSE_WAIT
  TCP    
82.53.150.179:4188
 
195.22.198.30:80
       CLOSE_WAIT
  TCP    
82.53.150.179:4233
 
83.184.107.242:1091
    ESTABLISHED
  TCP    
82.53.150.179:4663
 
72.51.37.109:15932
     ESTABLISHED
  TCP    
82.53.150.179:4667
 
82.53.162.209:4662
     ESTABLISHED
  TCP    
82.53.150.179:4686
 
151.51.236.206:4662
    ESTABLISHED
  TCP    
82.53.150.179:4707
 
85.130.69.25:54421
     ESTABLISHED
  TCP    
82.53.150.179:4760
 
82.58.206.97:4662
      ESTABLISHED
  TCP    
82.53.150.179:5000
 
85.20.187.56:4668
      FIN_WAIT_1
  TCP    
82.53.150.179:47984
 
70.149.245.27:50244
    TIME_WAIT
  TCP    
82.53.150.179:47984
 
80.33.36.222:60849
     ESTABLISHED
  TCP    
82.53.150.179:47984
 
80.53.246.6:3367
       ESTABLISHED
  TCP    
82.53.150.179:47984
 
80.102.172.83:3740
     TIME_WAIT
  TCP    
82.53.150.179:47984
 
81.1.237.37:59928
      ESTABLISHED
  TCP    
82.53.150.179:47984
 
81.32.151.186:2888
     ESTABLISHED
  TCP    
82.53.150.179:47984
 
81.34.161.154:15106
    TIME_WAIT
  TCP    
82.53.150.179:47984
 
81.44.242.147:2318
     TIME_WAIT
  TCP    
82.53.150.179:47984
 
81.74.114.23:1849
      TIME_WAIT
  TCP    
82.53.150.179:47984
 
81.250.7.110:1536
      ESTABLISHED
  TCP    
82.53.150.179:47984
 
82.49.110.143:1045
     TIME_WAIT
  TCP    
82.53.150.179:47984
 
82.53.190.138:2857
     TIME_WAIT
  TCP    
82.53.150.179:47984
 
82.54.183.116:1686
     ESTABLISHED
  TCP    
82.53.150.179:47984
 
82.56.29.145:1973
      TIME_WAIT
  TCP    
82.53.150.179:47984
 
82.58.4.2:2005
         ESTABLISHED
  TCP    
82.53.150.179:47984
 
82.58.34.155:2300
      ESTABLISHED
  TCP    
82.53.150.179:47984
 
82.58.56.210:1939
      ESTABLISHED
  TCP    
82.53.150.179:47984
 
82.58.70.4:2657
        TIME_WAIT
  TCP    
82.53.150.179:47984
 
82.58.83.27:4244
       TIME_WAIT
  TCP    
82.53.150.179:47984
 
82.60.186.215:4649
     TIME_WAIT
  TCP    
82.53.150.179:47984
 
82.90.21.89:20052
      TIME_WAIT
  TCP    
82.53.150.179:47984
 
83.10.207.86:60132
     TIME_WAIT
  TCP    
82.53.150.179:47984
 
83.26.57.20:1820
       TIME_WAIT
  TCP    
82.53.150.179:47984
 
83.29.83.101:3851
      ESTABLISHED
  TCP    
82.53.150.179:47984
 
83.43.84.63:1261
       TIME_WAIT
  TCP    
82.53.150.179:47984
 
83.46.24.64:1078
       ESTABLISHED
  TCP    
82.53.150.179:47984
 
83.50.163.137:13993
    ESTABLISHED
  TCP    
82.53.150.179:47984
 
83.60.117.89:24268
     ESTABLISHED
  TCP    
82.53.150.179:47984
 
83.154.92.100:2101
     ESTABLISHED
  TCP    
82.53.150.179:47984
 
83.167.108.33:44140
    ESTABLISHED
  TCP    
82.53.150.179:47984
 
83.190.168.218:2359
    TIME_WAIT
  TCP    
82.53.150.179:47984
 
84.6.208.137:2342
      ESTABLISHED
  TCP    
82.53.150.179:47984
 
84.9.40.199:29689
      ESTABLISHED
  TCP    
82.53.150.179:47984
 
84.108.229.49:1559
     TIME_WAIT
  TCP    
82.53.150.179:47984
 
84.221.169.3:2932
      TIME_WAIT
  TCP    
82.53.150.179:47984
 
85.50.32.67:18605
      TIME_WAIT
  TCP    
82.53.150.179:47984
 
85.57.16.203:1392
      TIME_WAIT
  TCP    
82.53.150.179:47984
 
85.68.239.222:3092
     TIME_WAIT
  TCP    
82.53.150.179:47984
 
85.137.0.252:1811
      TIME_WAIT
  TCP    
82.53.150.179:47984
 
86.197.208.202:2319
    TIME_WAIT
  TCP    
82.53.150.179:47984
 
87.0.28.227:2093
       TIME_WAIT
  TCP    
82.53.150.179:47984
 
87.0.87.252:2186
       TIME_WAIT
  TCP    
82.53.150.179:47984
 
87.1.93.172:3691
       ESTABLISHED
  TCP    
82.53.150.179:47984
 
87.2.57.135:3009
       ESTABLISHED
  TCP    
82.53.150.179:47984
 
87.3.253.112:2375
      TIME_WAIT
  TCP    
82.53.150.179:47984
 
87.4.95.75:11578
       TIME_WAIT
  TCP    
82.53.150.179:47984
 
87.4.186.201:1663
      TIME_WAIT
  TCP    
82.53.150.179:47984
 
87.5.96.110:3276
       TIME_WAIT
  TCP    
82.53.150.179:47984
 
87.5.96.110:3329
       ESTABLISHED
  TCP    
82.53.150.179:47984
 
87.6.254.119:1796
      ESTABLISHED
  TCP    
82.53.150.179:47984
 
87.7.2.144:4547
        ESTABLISHED
  TCP    
82.53.150.179:47984
 
87.9.90.14:4089
        TIME_WAIT
  TCP    
82.53.150.179:47984
 
87.10.203.11:29008
     TIME_WAIT
  TCP    
82.53.150.179:47984
 
87.11.18.254:2336
      TIME_WAIT
  TCP    
82.53.150.179:47984
 
87.11.214.156:4498
     ESTABLISHED
  TCP    
82.53.150.179:47984
 
87.21.131.79:39938
     TIME_WAIT
  TCP    
82.53.150.179:47984
 
87.218.120.213:3609
    TIME_WAIT
  TCP    
82.53.150.179:47984
 
88.18.63.96:1851
       TIME_WAIT
  TCP    
82.53.150.179:47984
 
88.121.70.213:4596
     ESTABLISHED
  TCP    
82.53.150.179:47984
 
121.134.42.241:1335
    TIME_WAIT
  TCP    
82.53.150.179:47984
 
151.9.153.114:1030
     TIME_WAIT
  TCP    
82.53.150.179:47984
 
151.13.240.66:33001
    TIME_WAIT
  TCP    
82.53.150.179:47984
 
151.16.14.119:3333
     TIME_WAIT
  TCP    
82.53.150.179:47984
 
151.16.14.119:4554
     ESTABLISHED
  TCP    
82.53.150.179:47984
 
151.37.64.200:1151
     TIME_WAIT
  TCP    
82.53.150.179:47984
 
151.37.226.148:1207
    TIME_WAIT
  TCP    
82.53.150.179:47984
 
151.42.190.127:1231
    TIME_WAIT
  TCP    
82.53.150.179:47984
 
151.47.192.170:3673
    ESTABLISHED
  TCP    
82.53.150.179:47984
 
151.47.245.54:2999
     TIME_WAIT
  TCP    
82.53.150.179:47984
 
151.51.36.251:23584
    ESTABLISHED
  TCP    
82.53.150.179:47984
 
172.186.240.75:3194
    ESTABLISHED
  TCP    
82.53.150.179:47984
 
196.201.84.53:2279
     ESTABLISHED
  TCP    
82.53.150.179:47984
 
212.22.58.188:11963
    ESTABLISHED
  TCP    
82.53.150.179:47984
 
212.194.103.226:30231
  ESTABLISHED
  TCP    
82.53.150.179:47984
 
212.195.129.76:3055
    ESTABLISHED
  TCP    
82.53.150.179:47984
 
213.103.85.29:57512
    ESTABLISHED
  TCP    
82.53.150.179:47984
 
213.217.153.217:1262
   TIME_WAIT
  TCP    
82.53.150.179:47984
 
213.255.82.218:56048
   TIME_WAIT
  TCP    
127.0.0.1:1029
 
0.0.0.0:0
              LISTENING
  TCP    
127.0.0.1:1241
 
0.0.0.0:0
              LISTENING
  TCP    
127.0.0.1:10110
 
0.0.0.0:0
              LISTENING
  TCP    
169.254.35.177:139
 
0.0.0.0:0
              LISTENING
  UDP    
0.0.0.0:445
            *:*
  UDP    
0.0.0.0:500
            *:*
  UDP    
0.0.0.0:1034
           *:*
  UDP    
0.0.0.0:1938
           *:*
  UDP    
0.0.0.0:2169
           *:*
  UDP    
0.0.0.0:2170
           *:*
  UDP    
0.0.0.0:4175
           *:*
  UDP    
0.0.0.0:4500
           *:*
  UDP    
0.0.0.0:4661
           *:*
  UDP    
0.0.0.0:5097
           *:*
  UDP    
0.0.0.0:31337
          *:*
  UDP    
0.0.0.0:54321
          *:*
  UDP    
82.53.150.179:9
        *:*
  UDP    
82.53.150.179:123
      *:*
  UDP    
82.53.150.179:1900
     *:*
  UDP    
82.53.150.179:9820
     *:*
  UDP    
82.53.150.179:26768
    *:*
  UDP    
127.0.0.1:123
          *:*
  UDP    
127.0.0.1:1900
         *:*
  UDP    
127.0.0.1:1937
         *:*
  UDP    
127.0.0.1:2957
         *:*
  UDP    
127.0.0.1:4065
         *:*
  UDP    
127.0.0.1:4095
         *:*
  UDP    
127.0.0.1:4176
         *:*
  UDP    
127.0.0.1:4649
         *:*
  UDP    
169.254.35.177:123
     *:*
  UDP    
169.254.35.177:137
     *:*
  UDP    
169.254.35.177:138
     *:*
  UDP    
169.254.35.177:1900
    *:*
  UDP    
169.254.35.177:9605
    *:*
  UDP    
169.254.35.177:43609
   *:*
Credo di essere messo alquanto male!!!

*Telemaco78* scrisse:
|>E aggiungo i lrisultato del netstat
|>
|>
|> Connessioni attive
[...]
|> Credo di essere messo alquanto male!!!
Un porto di mare... ma hai un firewall?
Stai usando P2P per caso? Anche l'altro log è allarmante...
una marea di programmi in avvio automatico inutili.
C:\WINDOWS\Downloaded Program Files\SpSubRx.exe
Questo puzza.
Ciao
-- 
Lo Zio Fizzy
       /)/)
     (  '.')
   o(_('')('')


Tutto sistemato con una bella formattazione e una mirata installazione di 
software necessari.....
Ho creato anche una partizione in cui effettuare connesisoni e/o prove 
"pericolose".
grazie