Net helpmsg 2182

Question

Buongiorno, ho provato anche a formattare il pc e installare pulito win 10, ma niente da fare. C'è qualcosa che mi blocca gli aggiornamenti di windows update. Mi linkate gli ultimi aggiornamenti manuali di net framework e sicurezza? La colpa può essere lo stato dell'hard disk leggermente precario? Recentemente ho trovato ed eliminato con Windows Defender il trojan KBOB. Prima di formattare c'era un volume nascosto nell'hard disk, può essere stato creato dal trojan?

Answer 1

ecco qua

Answer 2

Dalla pagina del mio modem WIND dopo averlo saggiamente attivato

Windows Update adesso dice che non ci sono ulteriori aggiornamenti, ma se cancello la cartella oldcat me li indica di nuovo

Answer 3

ok, da dove hai preso i log relativi gli attacchi?

ma hai provato ad eseguire windows update? restituisce errori?

Answer 4

anche questo

Answer 5

stanotte e ieri c'è stato un ping of death attack, un udp flooding attack e tcp/udp port scan attack

Aug 6 10:37:02 kern.alert kernel: UDP_FLOODING ATTACK:IN=ppp2 OUT= MAC= SRC=45.93.16.111 DST=151.56.188.36 LEN=434 TOS=0x00 PREC=0x00 TTL=50 ID=65196 DF PROTO=UDP SPT=5156 DPT=7080 LEN=414

Aug 6 23:28:51 kern.alert kernel: TCP PORT SCAN ATTACK:IN=ppp2 OUT= MAC= SRC=220.134.120.112 DST=151.56.188.36 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=38303 DF PROTO=TCP SPT=64799 DPT=445 WINDOW=0 RES=0x00 URGP=0

Aug 7 00:05:27 kern.alert kernel: PING OF DEATH ATTACK:IN=ppp2 OUT= MAC= SRC=3.72.1.100 DST=151.56.188.36 LEN=84 TOS=0x00 PREC=0x00 TTL=27 ID=0 PROTO=ICMP TYPE=8 CODE=0 ID=17 SEQ=20043

Aug 7 04:51:22 kern.alert kernel: TCP PORT SCAN ATTACK:IN=ppp2 OUT= MAC= SRC=83.0.171.70 DST=151.56.188.36 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=25736 DF PROTO=TCP SPT=58195 DPT=47584 WINDOW=0 RES=0x00 URGP=0

Aug 7 07:30:12 kern.alert kernel: UDP PORT SCAN ATTACK:IN=ppp2 OUT= MAC= SRC=104.152.52.221 DST=151.56.188.36 LEN=28 TOS=0x00 PREC=0x00 TTL=239 ID=12779 PROTO=UDP SPT=46205 DPT=30718 LEN=8

Aug 7 11:05:06 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).

Aug 7 13:32:17 user.info zHttpd: Account: User 'admin' from the host(192.168.1.231) will be logout because session is timeout.

Aug 7 13:32:37 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).

Aug 7 17:00:31 kern.alert kernel: TCP PORT SCAN ATTACK:IN=ppp2 OUT= MAC= SRC=183.251.157.80 DST=151.56.188.36 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=54241 DF PROTO=TCP SPT=64671 DPT=17916 WINDOW=0 RES=0x00 URGP=0

Aug 7 17:17:06 kern.alert kernel: TCP PORT SCAN ATTACK:IN=ppp2 OUT= MAC= SRC=83.0.171.70 DST=151.56.188.36 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=62939 DF PROTO=TCP SPT=51351 DPT=38581 WINDOW=0 RES=0x00 URGP=0

Aug 7 17:53:58 user.info zHttpd: Account: User 'admin' from the host(192.168.1.231) will be logout because session is timeout.

Aug 7 17:54:16 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).

Aug 7 20:52:43 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).

Aug 7 21:01:41 user.info zcmdModuleCfg: Account: User 'admin' change password.

Aug 7 21:01:49 user.info zHttpd: Account: User 'admin' Session ID = ph04WvSUwtUJZFbn3a3cimdk0gAIBypR : logout from the host(192.168.1.231).

Aug 7 21:02:09 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).

Aug 7 23:39:21 kern.alert kernel: UDP_FLOODING ATTACK:IN=ppp2 OUT= MAC= SRC=167.86.76.211 DST=151.56.188.36 LEN=443 TOS=0x00 PREC=0x00 TTL=57 ID=54879 DF PROTO=UDP SPT=5106 DPT=5069 LEN=423

Aug 8 03:31:49 kern.alert kernel: UDP_FLOODING ATTACK:IN=ppp2 OUT= MAC= SRC=45.134.144.249 DST=151.56.188.36 LEN=428 TOS=0x00 PREC=0x00 TTL=50 ID=55814 DF PROTO=UDP SPT=5096 DPT=16074 LEN=408

Aug 8 06:24:07 user.info zHttpd: Account: User 'admin' from the host(192.168.1.231) will be logout because session is timeout.

Aug 8 06:24:48 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).

Aug 8 09:05:05 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).

Aug 8 09:14:54 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).

Aug 8 09:23:29 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).

Aug 8 09:36:35 user.info zHttpd: Account: User 'admin' from the host(192.168.1.231) will be logout because session is timeout.

Aug 8 09:42:12 user.info zHttpd: Account: Enter an invalid password for User 'admin' form the host(192.168.1.231).

Aug 8 09:42:23 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).

Aug 8 10:35:40 user.info zHttpd: Account: User 'admin' from the host(192.168.1.231) will be logout because session is timeout.

Aug 8 10:35:57 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).

Aug 8 10:42:14 user.info zHttpd: Account: User 'admin' from the host(192.168.1.231) will be logout because session is timeout.

Aug 8 11:00:07 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).

Aug 8 12:38:09 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).

Aug 8 14:39:22 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).

Aug 9 00:57:00 kern.alert kernel: UDP_FLOODING ATTACK:IN=ppp2 OUT= MAC= SRC=45.134.144.238 DST=151.56.188.36 LEN=427 TOS=0x00 PREC=0x00 TTL=50 ID=28869 DF PROTO=UDP SPT=5060 DPT=13077 LEN=407

Aug 9 07:09:33 kern.alert kernel: UDP_FLOODING ATTACK:IN=ppp2 OUT= MAC= SRC=2.57.121.226 DST=151.50.8.234 LEN=441 TOS=0x00 PREC=0x00 TTL=56 ID=6726 DF PROTO=UDP SPT=5071 DPT=6060 LEN=421

Aug 9 08:40:36 user.info zHttpd: Account: User 'admin' from the host(192.168.1.231) will be logout because session is timeout.

Aug 9 08:41:01 user.info zHttpd: Account: User 'admin' login from the host(192.168.1.231).