HijackThis Log :
Code:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 09:44:23, on 16.02.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Users\Admin\Downloads\HiJackThis204.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=102876&gct=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Clemens\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Planer (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Echtzeit Scanner (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - Unknown owner - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (file missing)
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NitroPDFReaderDriverCreatorReadSpool2 (NitroReaderDriverReadSpool2) - Nitro PDF Software - C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8606 bytes
Code:
[DOS attack: FIN Scan] attack packets in last 20 sec from ip [74.121.28.141], Donnerstag, Feb 16,2012 09:53:33 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:53:29 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [74.121.28.141], Donnerstag, Feb 16,2012 09:52:55 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:52:50 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [74.121.28.141], Donnerstag, Feb 16,2012 09:52:19 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:52:14 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:51:35 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [199.68.156.31], Donnerstag, Feb 16,2012 09:51:28 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [199.68.156.31], Donnerstag, Feb 16,2012 09:51:22 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [107.21.99.217], Donnerstag, Feb 16,2012 09:51:21 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [199.68.156.31], Donnerstag, Feb 16,2012 09:51:19 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [50.19.98.137], Donnerstag, Feb 16,2012 09:51:18 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [199.68.156.31], Donnerstag, Feb 16,2012 09:51:17 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [107.21.99.217], Donnerstag, Feb 16,2012 09:51:15 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:51:03 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:50:29 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [50.19.98.137], Donnerstag, Feb 16,2012 09:50:06 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:49:47 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:49:16 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:48:31 [UPnP event: Public_UPNP_C3] from source 192.168.1.3, Donnerstag, Feb 16,2012 09:48:20 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [69.171.229.13], Donnerstag, Feb 16,2012 09:48:09 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:48:01 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [69.171.229.13], Donnerstag, Feb 16,2012 09:47:54 [LAN access from remote] from 84.72.240.157:63861 to 192.168.1.8:14748 Donnerstag, Feb 16,2012 09:47:30 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:46:51 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:46:17 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:45:35 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:44:59 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [95.100.255.42], Donnerstag, Feb 16,2012 09:44:54 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [95.100.255.65], Donnerstag, Feb 16,2012 09:44:52 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:44:20 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:43:48 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [193.46.63.175], Donnerstag, Feb 16,2012 09:43:33 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:43:17 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [178.77.90.225], Donnerstag, Feb 16,2012 09:43:09 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [46.137.59.88], Donnerstag, Feb 16,2012 09:43:07 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [107.20.195.237], Donnerstag, Feb 16,2012 09:43:00 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [66.220.147.27], Donnerstag, Feb 16,2012 09:42:45 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:42:34 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [66.220.147.27], Donnerstag, Feb 16,2012 09:42:22 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [46.137.59.88], Donnerstag, Feb 16,2012 09:42:19 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [95.100.187.120], Donnerstag, Feb 16,2012 09:42:06 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [69.171.227.53], Donnerstag, Feb 16,2012 09:42:01 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:42:00 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [46.137.59.88], Donnerstag, Feb 16,2012 09:41:37 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [95.100.187.120], Donnerstag, Feb 16,2012 09:41:34 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [46.137.59.88], Donnerstag, Feb 16,2012 09:41:34 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [95.100.187.120], Donnerstag, Feb 16,2012 09:41:18 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [69.171.227.53], Donnerstag, Feb 16,2012 09:41:18 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [95.100.187.120], Donnerstag, Feb 16,2012 09:41:03 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [69.171.227.53], Donnerstag, Feb 16,2012 09:40:56 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [66.220.147.27], Donnerstag, Feb 16,2012 09:40:50 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:40:45 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [69.171.227.53], Donnerstag, Feb 16,2012 09:40:45 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [66.220.147.27], Donnerstag, Feb 16,2012 09:40:41 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [69.171.227.53], Donnerstag, Feb 16,2012 09:40:37 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [66.220.147.27], Donnerstag, Feb 16,2012 09:40:33 [DOS attack: RST Scan] attack packets in last 20 sec from ip [50.19.98.137], Donnerstag, Feb 16,2012 09:40:24 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:40:00 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [208.81.234.97], Donnerstag, Feb 16,2012 09:39:51 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [89.105.215.34], Donnerstag, Feb 16,2012 09:39:48 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [208.81.234.97], Donnerstag, Feb 16,2012 09:39:44 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [216.39.108.147], Donnerstag, Feb 16,2012 09:39:39 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:39:22 [LAN access from remote] from 93.130.165.156:12249 to 192.168.1.8:14748 Donnerstag, Feb 16,2012 09:39:19 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [89.105.215.34], Donnerstag, Feb 16,2012 09:39:00 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [89.207.18.81], Donnerstag, Feb 16,2012 09:38:58 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [89.207.18.80], Donnerstag, Feb 16,2012 09:38:58 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [89.207.18.81], Donnerstag, Feb 16,2012 09:38:50 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [89.207.18.80], Donnerstag, Feb 16,2012 09:38:50 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:38:47 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [89.207.18.81], Donnerstag, Feb 16,2012 09:38:46 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [89.207.18.80], Donnerstag, Feb 16,2012 09:38:46 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [89.207.18.81], Donnerstag, Feb 16,2012 09:38:44 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [89.207.18.80], Donnerstag, Feb 16,2012 09:38:44 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [89.207.18.81], Donnerstag, Feb 16,2012 09:38:43 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [89.207.18.80], Donnerstag, Feb 16,2012 09:38:43 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [89.207.18.81], Donnerstag, Feb 16,2012 09:38:32 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [74.121.28.151], Donnerstag, Feb 16,2012 09:38:03 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:38:02 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [173.194.32.97], Donnerstag, Feb 16,2012 09:37:34 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:37:31 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [66.220.147.38], Donnerstag, Feb 16,2012 09:36:56 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:36:48 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [66.220.147.38], Donnerstag, Feb 16,2012 09:36:33 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [74.121.28.151], Donnerstag, Feb 16,2012 09:36:32 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [66.220.147.38], Donnerstag, Feb 16,2012 09:36:19 [LAN access from remote] from 64.4.23.162:40004 to 192.168.1.8:14748 Donnerstag, Feb 16,2012 09:36:16 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:36:14 [LAN access from remote] from 84.72.240.157:63861 to 192.168.1.8:14748 Donnerstag, Feb 16,2012 09:36:01 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [213.165.65.71], Donnerstag, Feb 16,2012 09:35:48 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [74.121.28.151], Donnerstag, Feb 16,2012 09:35:47 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [74.121.28.151], Donnerstag, Feb 16,2012 09:35:24 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [74.121.28.151], Donnerstag, Feb 16,2012 09:35:03 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:34:54 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [194.232.105.141], Donnerstag, Feb 16,2012 09:34:50 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [74.121.28.151], Donnerstag, Feb 16,2012 09:34:38 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:34:22 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.65.101], Donnerstag, Feb 16,2012 09:34:09 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [74.121.30.151], Donnerstag, Feb 16,2012 09:33:45 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:33:39 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.65.101], Donnerstag, Feb 16,2012 09:33:22 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.65.100], Donnerstag, Feb 16,2012 09:33:20 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.65.101], Donnerstag, Feb 16,2012 09:33:15 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [194.232.105.141], Donnerstag, Feb 16,2012 09:33:14 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.65.101], Donnerstag, Feb 16,2012 09:33:08 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [74.121.28.151], Donnerstag, Feb 16,2012 09:33:00 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:32:59 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.65.100], Donnerstag, Feb 16,2012 09:32:53 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [66.220.149.32], Donnerstag, Feb 16,2012 09:32:42 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [69.171.227.53], Donnerstag, Feb 16,2012 09:32:41 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.65.100], Donnerstag, Feb 16,2012 09:32:40 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [199.68.156.31], Donnerstag, Feb 16,2012 09:32:39 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [199.68.156.31], Donnerstag, Feb 16,2012 09:32:34 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.65.100], Donnerstag, Feb 16,2012 09:32:33 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [199.68.156.31], Donnerstag, Feb 16,2012 09:32:30 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.65.100], Donnerstag, Feb 16,2012 09:32:29 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [199.68.156.31], Donnerstag, Feb 16,2012 09:32:29 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.65.100], Donnerstag, Feb 16,2012 09:32:27 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [194.232.105.141], Donnerstag, Feb 16,2012 09:32:26 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:32:25 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [107.20.186.3], Donnerstag, Feb 16,2012 09:32:12 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [74.121.28.151], Donnerstag, Feb 16,2012 09:32:12 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:32:03 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [194.232.105.141], Donnerstag, Feb 16,2012 09:32:02 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [69.171.227.53], Donnerstag, Feb 16,2012 09:31:56 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [194.232.105.141], Donnerstag, Feb 16,2012 09:31:50 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [74.121.28.151], Donnerstag, Feb 16,2012 09:31:47 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:31:46 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:31:46 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:31:46 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [194.232.105.141], Donnerstag, Feb 16,2012 09:31:38 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:31:36 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [74.121.28.151], Donnerstag, Feb 16,2012 09:31:35 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [69.171.227.53], Donnerstag, Feb 16,2012 09:31:34 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [74.121.28.151], Donnerstag, Feb 16,2012 09:31:24 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [69.171.227.53], Donnerstag, Feb 16,2012 09:31:23 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:31:21 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [69.171.227.53], Donnerstag, Feb 16,2012 09:31:17 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.218], Donnerstag, Feb 16,2012 09:31:17 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [69.171.227.53], Donnerstag, Feb 16,2012 09:31:12 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.218], Donnerstag, Feb 16,2012 09:31:11 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:31:08 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [107.20.186.3], Donnerstag, Feb 16,2012 09:31:03 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:31:01 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [216.39.108.147], Donnerstag, Feb 16,2012 09:30:59 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [217.72.194.208], Donnerstag, Feb 16,2012 09:30:59 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:30:44 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:30:40 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.218], Donnerstag, Feb 16,2012 09:30:39 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:30:36 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:30:34 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:30:28 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [184.84.182.74], Donnerstag, Feb 16,2012 09:30:28 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.218], Donnerstag, Feb 16,2012 09:30:27 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:30:27 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [184.84.182.74], Donnerstag, Feb 16,2012 09:30:26 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.218], Donnerstag, Feb 16,2012 09:30:24 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:30:19 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [216.39.108.214], Donnerstag, Feb 16,2012 09:30:14 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:30:13 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [213.165.65.71], Donnerstag, Feb 16,2012 09:30:11 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:30:10 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:30:08 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [216.39.108.214], Donnerstag, Feb 16,2012 09:30:08 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.218], Donnerstag, Feb 16,2012 09:30:08 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.64.213], Donnerstag, Feb 16,2012 09:30:07 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:30:03 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [2.16.109.234], Donnerstag, Feb 16,2012 09:30:02 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.218], Donnerstag, Feb 16,2012 09:30:02 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:30:00 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.218], Donnerstag, Feb 16,2012 09:30:00 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:29:58 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [217.72.194.208], Donnerstag, Feb 16,2012 09:29:57 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:29:57 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:29:56 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.218], Donnerstag, Feb 16,2012 09:29:52 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:29:52 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:29:50 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [85.236.61.218], Donnerstag, Feb 16,2012 09:29:49 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.218], Donnerstag, Feb 16,2012 09:29:49 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:29:46 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.218], Donnerstag, Feb 16,2012 09:29:41 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:29:40 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.218], Donnerstag, Feb 16,2012 09:29:40 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.64.213], Donnerstag, Feb 16,2012 09:29:37 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:29:35 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [2.16.109.234], Donnerstag, Feb 16,2012 09:29:33 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [213.165.65.71], Donnerstag, Feb 16,2012 09:29:30 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [217.72.194.208], Donnerstag, Feb 16,2012 09:29:27 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:29:26 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:29:25 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.64.213], Donnerstag, Feb 16,2012 09:29:23 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:29:22 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:29:22 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [2.16.109.234], Donnerstag, Feb 16,2012 09:29:19 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:29:18 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:29:16 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.64.213], Donnerstag, Feb 16,2012 09:29:15 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [66.220.147.38], Donnerstag, Feb 16,2012 09:29:15 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [2.16.109.234], Donnerstag, Feb 16,2012 09:29:12 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.64.213], Donnerstag, Feb 16,2012 09:29:12 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [217.72.194.208], Donnerstag, Feb 16,2012 09:29:11 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.64.213], Donnerstag, Feb 16,2012 09:29:10 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [213.165.65.71], Donnerstag, Feb 16,2012 09:29:10 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [213.165.64.213], Donnerstag, Feb 16,2012 09:29:09 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:29:09 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [66.220.147.38], Donnerstag, Feb 16,2012 09:29:08 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [2.16.109.234], Donnerstag, Feb 16,2012 09:29:06 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:29:06 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:29:05 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [217.72.194.208], Donnerstag, Feb 16,2012 09:29:04 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:29:00 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [66.220.147.38], Donnerstag, Feb 16,2012 09:29:00 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [217.72.194.208], Donnerstag, Feb 16,2012 09:29:00 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [213.165.65.71], Donnerstag, Feb 16,2012 09:28:59 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:28:59 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:28:58 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:28:56 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [66.220.147.38], Donnerstag, Feb 16,2012 09:28:56 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [213.165.65.71], Donnerstag, Feb 16,2012 09:28:54 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [217.72.204.216], Donnerstag, Feb 16,2012 09:28:54 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [66.220.147.38], Donnerstag, Feb 16,2012 09:28:54 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [213.165.65.71], Donnerstag, Feb 16,2012 09:28:52 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:28:47 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:28:46 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:28:43 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:28:41 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:28:40 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [85.236.61.206], Donnerstag, Feb 16,2012 09:28:39 [UPnP event: Public_UPNP_C3] from source 192.168.1.3, Donnerstag, Feb 16,2012 09:28:30 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [173.194.70.95], Donnerstag, Feb 16,2012 09:28:29 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [217.79.188.11], Donnerstag, Feb 16,2012 09:28:27 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [173.194.70.95], Donnerstag, Feb 16,2012 09:28:19 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [95.100.255.56], Donnerstag, Feb 16,2012 09:28:17 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:28:00 [DOS attack: FIN Scan] attack packets in last 20 sec from ip [173.194.70.95], Donnerstag, Feb 16,2012 09:27:55 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [95.100.255.56], Donnerstag, Feb 16,2012 09:27:49 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:27:29 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [95.100.255.56], Donnerstag, Feb 16,2012 09:27:21 [UPnP event: Public_UPNP_C3] from source 192.168.1.3, Donnerstag, Feb 16,2012 09:27:04 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [216.39.108.147], Donnerstag, Feb 16,2012 09:26:54 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:26:47 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [205.251.209.214], Donnerstag, Feb 16,2012 09:26:39 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [216.39.108.214], Donnerstag, Feb 16,2012 09:26:08 [DOS attack: ACK Scan] attack packets in last 20 sec from ip [216.39.108.148], Donnerstag, Feb 16,2012 09:26:07 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:26:07 [UPnP event: Public_UPNP_C3] from source 192.168.1.8, Donnerstag, Feb 16,2012 09:25:36 [LAN access from remote] from 64.4.23.162:40004 to 192.168.1.8:14748 Donnerstag, Feb 16,2012 09:25:35






wie kann ich das weggmachen ?