Hope any of you experts can help me undestand what is going on and what is originating these connection attemps. Today I followed the instructions 'How to Start Removing Viruses and Spyware from your Computer' and I attach the various scan logs. I did not find the origin of the problem, and I am not sure if I am exposed or not. The email warnings stopped and also the log stays clear of SynFlood attack warnings, but if i check with Windows Manager included in Advanced System Care the TCP connection attempts to this IP (212.48.8.140) on port 445 ('SYN_SENT' status) are still there. Spywareinfo.TrafficZ: Segnalibro (Firefox: Roger (default)) (Segnalibro, fixed)įinally I changed back the settings of my router as they were.Win32.Bifrost: Impostazioni (Chiave di registro, fixed).I also did a full system scan with Spybot S&D and it found (and repaired?) I did a 'TPP/UDP' scan with the Windows Manager included in Advanced System Care and it showed TCP connection attempts to this IP (212.48.8.140) on port 445, status is always 'SYN_SENT' Nothing showed up.īut SynFlood attack warnings kept arriving. In the routers' log I can see that the local laptop port changes continually (range from 49324 to 57059) while the remote port is allways 445.Īs this point, suspecting being hacked, I started checks with antivirus (KasperSky 2011) then i ran Advanced System Care v3.7.2 (IObit) let it do a default system scan and cleanup. So after this test I suspect there is somekind of service or ying to connect to this specific IP address on port 445. reboot laptop normally, loged in, not opening any application - RESULT: SynFlood TCP attack started after only a few seconds.reboot laptop, leaving it idle on the log-in screen without loggin in - RESULT: no SynFlood TCP attack.reboot laptop in SAVE MODE (F8) with network enabled - RESULT: no SynFlood TCP attack.Observing the routers' log in realtime (on another laptop) I did the following tests: I started receiving multiple SynFlood attac warnings (sent me by email by my router)Īfter viewing the routers' log and some analisis (switching back and forth betweern wired LAN and wifi connection on one specif laptop) I suspect the traffic was between this Acer Aspire 5736G/windows 7 laptop and the internet. firewall: Denial of Service Thresholds: TCP Maximum Incomplete: 30 (was 10).firewall: Bypass Triangle Route: ON (was off).I suspect beeing hacked/exposed as I received multiple SynFlood attack warnigns.Ī few days ago i changed some settings on my router (ZyXel P-660HW-D1) Thanks in advance to each of you reading, writing and giving solutions!

Dreamboxedit 3.0 0.0 setup