plný disk C

[tirpakf]

Priemerne raz za týždeň mi PC oznámi že na disku je málo miesta.Odstránenie bodov obnovenia
pomôže len na krátky čas.Väčšinu programov som už premiestnil na prenosný disk (USB).
Neviem čo si môžem dovoliť.


Logfile of random's system information tool 1.08 (written by random/random)
Run by dell at 2011-06-05 21:08:22
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 626 MB (9%) free of 7 GB
Total RAM: 254 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:10:11, on 5.6.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\dell\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
c:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe
C:\Program Files\RSIT (1).exe
C:\Program Files\trend micro\dell.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (file missing)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (file missing)
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EPSON Stylus D120 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICCE.EXE /FU "C:\DOCUME~1\dell\LOCALS~1\Temp\E_S7.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\dell\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [HijackThis startup scan] C:\Program Files\Trend Micro\HiJackThis\HijackThis.exe /startupscan
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

--
End of file - 3906 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\MpIdleTask.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1935655697-1060284298-1004Core1cc20eb54de7ca0.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll []
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2010-11-30 997408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"EPSON Stylus D120 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICCE.EXE [2007-03-12 182272]
"Google Update"=C:\Documents and Settings\dell\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-04-29 136176]
"HijackThis startup scan"=C:\Program Files\Trend Micro\HiJackThis\HijackThis.exe /startupscan []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WINDOW~3\MpShHook.dll [2006-11-03 83224]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-06-05 20:52:13 ----D---- C:\rsit
2011-06-05 20:50:39 ----A---- C:\Program Files\RSIT (1).exe
2011-06-05 18:37:38 ----A---- C:\Program Files\RSIT.exe
2011-06-05 17:27:50 ----D---- C:\Program Files\Trend Micro

======List of files/folders modified in the last 1 months======

2011-06-05 10:49:20 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-05-11 08:47:58 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 MpFilter;Microsoft Malware Protection Driver; C:\WINDOWS\system32\DRIVERS\MpFilter.sys [2010-10-24 165264]
R1 MpKsl41e0f22d;MpKsl41e0f22d; \??\c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{0924049F-6DCE-440E-9D08-FFC3221DCAFE}\MpKsl41e0f22d.sys []
R1 P3;Intel PentiumIII Processor Driver; C:\WINDOWS\system32\DRIVERS\p3.sys [2008-04-13 42752]
R3 EL90XBC;3Com EtherLink XL 90XB/C Adapter Driver; C:\WINDOWS\system32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
R3 es1371;Creative AudioPCI (ES1371,ES1373) (WDM); C:\WINDOWS\system32\drivers\es1371mp.sys [2001-08-17 40704]
R3 giveio;giveio Service; C:\WINDOWS\system32\DRIVERS\giveio.sys [2000-07-04 3197]
R3 i81x;i81x; C:\WINDOWS\system32\DRIVERS\i81xnt5.sys [2004-08-03 161020]
R3 portio;WinPic800 IO Drivers; C:\WINDOWS\system32\DRIVERS\WP800IO.sys [2007-08-26 5248]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 WinDriver6;WinDriver6; C:\WINDOWS\system32\drivers\windrvr6.sys [2008-07-03 193696]
S1 MpKsl051e4f47;MpKsl051e4f47; \??\c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A9CB6130-5B89-4BAF-8650-BD3882D3BD0F}\MpKsl051e4f47.sys []
S1 MpKsl05bcf620;MpKsl05bcf620; \??\c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{7D74AB60-E4DE-4A6B-A206-C5A9DFF27176}\MpKsl05bcf620.sys []
S1 MpKsl40e567c1;MpKsl40e567c1; \??\c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{DECF408A-725F-4231-855A-010773ABDD23}\MpKsl40e567c1.sys []
S1 MpKsl534f43da;MpKsl534f43da; \??\c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{3179FA88-9D28-46D6-8FB7-03205BE44F7F}\MpKsl534f43da.sys []
S1 MpKsl6747476c;MpKsl6747476c; \??\c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{587F5645-50A4-480D-A47B-025B83DA673F}\MpKsl6747476c.sys []
S1 MpKsl9931c7cc;MpKsl9931c7cc; \??\c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{EB4AF553-BA1A-42BD-9312-5E76BD422803}\MpKsl9931c7cc.sys []
S1 MpKsla5d181b0;MpKsla5d181b0; \??\c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{62FC5B84-58A3-4EFB-BC48-3E5EA6286738}\MpKsla5d181b0.sys []
S1 MpKslaa3d7f7d;MpKslaa3d7f7d; \??\c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{9D5BF29A-9ECE-4E7D-B131-F10F61C3074C}\MpKslaa3d7f7d.sys []
S1 MpKslc9e9c5a7;MpKslc9e9c5a7; \??\c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{E83EB961-9310-447E-B53B-965A248F3F92}\MpKslc9e9c5a7.sys []
S3 DLPortIO;DriverLINX Port I/O Driver; \??\C:\WINDOWS\system32\DRIVERS\DLPortIO.SYS []
S3 iAimFP0;iAimFP0; C:\WINDOWS\system32\DRIVERS\wADV01nt.sys [2004-08-03 12415]
S3 iAimFP1;iAimFP1; C:\WINDOWS\system32\DRIVERS\wADV02NT.sys [2004-08-03 12127]
S3 iAimFP2;iAimFP2; C:\WINDOWS\system32\DRIVERS\wADV05NT.sys [2004-08-03 11775]
S3 iAimFP3;iAimFP3; C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys [2004-08-03 12063]
S3 iAimFP4;iAimFP4; C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys [2004-08-03 19455]
S3 iAimFP5;iAimFP5; C:\WINDOWS\system32\DRIVERS\wADV07nt.sys [2004-08-03 11807]
S3 iAimFP6;iAimFP6; C:\WINDOWS\system32\DRIVERS\wADV08nt.sys [2004-08-03 11295]
S3 iAimFP7;iAimFP7; C:\WINDOWS\system32\DRIVERS\wADV09nt.sys [2004-08-03 11871]
S3 iAimTV0;iAimTV0; C:\WINDOWS\system32\DRIVERS\wATV01nt.sys [2004-08-03 29311]
S3 iAimTV1;iAimTV1; C:\WINDOWS\system32\DRIVERS\wATV02NT.sys [2004-08-03 19551]
S3 iAimTV3;iAimTV3; C:\WINDOWS\system32\DRIVERS\wATV04nt.sys [2004-08-03 33599]
S3 iAimTV4;iAimTV4; C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys [2004-08-03 23615]
S3 iAimTV5;iAimTV5; C:\WINDOWS\system32\DRIVERS\wATV10nt.sys [2004-08-03 25471]
S3 iAimTV6;iAimTV6; C:\WINDOWS\system32\DRIVERS\wATV06nt.sys [2004-08-03 22271]
S3 sermouse;Serial Mouse Driver; C:\WINDOWS\system32\DRIVERS\sermouse.sys [2001-08-17 17664]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 zlportio;zlportio; \??\C:\Program Files\Digitrace_0_0_0_9\zlportio.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2010-11-11 11736]
S2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]

-----------------EOF-----------------

[Rudy]

1. vyčistěte PC od balastu CCleanerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 .
2. dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[tirpakf]

C cleanerom sa voľná kapacita zväčšila z 5 na 10%

Prikladám log z Combo Fix

ComboFix 11-06-06.02 - dell 06.06.2011 22:32:05.1.1 - FAT32x86
Systém Microsoft Windows XP Home Edition 5.1.2600.3.1250.421.1033.18.254.36 [GMT 2:00]
Running from: c:\documents and settings\dell\Desktop\ComboFix.exe
.
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\dell\WINDOWS
c:\windows\desktop
c:\windows\system\Msvbvm50.dll
.
.
((((((((((((((((((((((((( Files Created from 2011-05-06 to 2011-06-06 )))))))))))))))))))))))))))))))
.
.
2011-06-06 20:24 . 2007-03-09 09:25 2321288 ------w- c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{288020CD-31F0-4208-A29C-7F9590CDF2F9}\mpengine.dll
2011-06-06 20:24 . 2007-03-09 09:25 2321288 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{73073EF5-1CCE-4FB7-A666-B2D0C2CCFDA4}\mpengine.dll
2011-06-06 20:24 . 2010-10-07 23:21 6146896 ------w- c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{DF4A9614-A7E7-4348-AB76-2B401FE83977}\mpengine.dll
2011-06-06 20:23 . 2010-10-07 23:21 6146896 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{0723CB48-060F-4954-A578-5F3C422F3CE2}\mpengine.dll
2011-06-06 10:48 . 2011-06-06 10:48 -------- d-----w- c:\program files\CCleaner
2011-06-05 18:52 . 2011-06-05 18:52 -------- d-----w- C:\rsit
2011-06-05 18:50 . 2011-06-05 18:50 339991 ----a-w- c:\program files\RSIT (1).exe
2011-06-05 16:37 . 2011-06-05 16:38 339991 ----a-w- c:\program files\RSIT.exe
2011-06-05 15:27 . 2011-06-05 15:27 -------- d-----w- c:\program files\Trend Micro
2011-05-18 17:34 . 2011-05-18 17:34 -------- d-----w- c:\windows\system32\wbem\Repository
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-25 13:10 . 2010-10-25 13:10 2104610 ----a-w- c:\program files\ISSetup.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[7] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
[7] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\$NtUninstallKB2509553$\mswsock.dll
[7] 2008-06-20 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[7] 2008-06-20 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\mswsock.dll
[7] 2008-06-20 . 097722F235A1FB698BF9234E01B52637 . 245248 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\mswsock.dll
[7] 2008-06-20 . 1DFCA7713EA5A70D5D93B436AEA0317A . 245248 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-06-20 . 943337D786A56729263071623BBB9DE5 . 245248 . . [5.1.2600.5625] . . c:\windows\system32\MSWSOCK.DLL
[-] 2008-06-20 . 943337D786A56729263071623BBB9DE5 . 245248 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
[7] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll
[7] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\mswsock.dll
[7] 2006-02-28 . 4E74AF063C3271FBEA20DD940CFD1184 . 245248 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB951748_0$\mswsock.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
.
S1 MpKsl051e4f47;MpKsl051e4f47;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A9CB6130-5B89-4BAF-8650-BD3882D3BD0F}\MpKsl051e4f47.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A9CB6130-5B89-4BAF-8650-BD3882D3BD0F}\MpKsl051e4f47.sys [?]
S1 MpKsl05bcf620;MpKsl05bcf620;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{7D74AB60-E4DE-4A6B-A206-C5A9DFF27176}\MpKsl05bcf620.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{7D74AB60-E4DE-4A6B-A206-C5A9DFF27176}\MpKsl05bcf620.sys [?]
S1 MpKsl40e567c1;MpKsl40e567c1;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{DECF408A-725F-4231-855A-010773ABDD23}\MpKsl40e567c1.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{DECF408A-725F-4231-855A-010773ABDD23}\MpKsl40e567c1.sys [?]
S1 MpKsl534f43da;MpKsl534f43da;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{3179FA88-9D28-46D6-8FB7-03205BE44F7F}\MpKsl534f43da.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{3179FA88-9D28-46D6-8FB7-03205BE44F7F}\MpKsl534f43da.sys [?]
S1 MpKsl6747476c;MpKsl6747476c;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{587F5645-50A4-480D-A47B-025B83DA673F}\MpKsl6747476c.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{587F5645-50A4-480D-A47B-025B83DA673F}\MpKsl6747476c.sys [?]
S1 MpKsl9931c7cc;MpKsl9931c7cc;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{EB4AF553-BA1A-42BD-9312-5E76BD422803}\MpKsl9931c7cc.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{EB4AF553-BA1A-42BD-9312-5E76BD422803}\MpKsl9931c7cc.sys [?]
S1 MpKsla5d181b0;MpKsla5d181b0;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{62FC5B84-58A3-4EFB-BC48-3E5EA6286738}\MpKsla5d181b0.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{62FC5B84-58A3-4EFB-BC48-3E5EA6286738}\MpKsla5d181b0.sys [?]
S1 MpKslaa3d7f7d;MpKslaa3d7f7d;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{9D5BF29A-9ECE-4E7D-B131-F10F61C3074C}\MpKslaa3d7f7d.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{9D5BF29A-9ECE-4E7D-B131-F10F61C3074C}\MpKslaa3d7f7d.sys [?]
S1 MpKslc9e9c5a7;MpKslc9e9c5a7;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{E83EB961-9310-447E-B53B-965A248F3F92}\MpKslc9e9c5a7.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{E83EB961-9310-447E-B53B-965A248F3F92}\MpKslc9e9c5a7.sys [?]
S2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3.11.2006 19:19 13592]
S3 DLPortIO;DriverLINX Port I/O Driver;c:\windows\system32\drivers\DLPORTIO.SYS [20.3.2010 22:00 3584]
S3 zlportio;zlportio;\??\c:\program files\Digitrace_0_0_0_9\zlportio.sys --> c:\program files\Digitrace_0_0_0_9\zlportio.sys [?]
.
Contents of the 'Scheduled Tasks' folder
.
2011-06-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1935655697-1060284298-1004Core1cc20eb54de7ca0.job
- c:\documents and settings\dell\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-04-29 20:30]
.
.
------- Supplementary Scan -------
.
TCP: DhcpNameServer = 195.28.64.99 195.80.171.4
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-AVR Studio 3.56 - c:\program files\Atmel\AVR Studio\Uninst.isu
AddRemove-ES C42 Series Guide - c:\program files\EPSON\ES C42\DeIsL1.isu
AddRemove-InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5} - c:\program files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe
AddRemove-JVComm32 - c:\program files\JVComm32\DeIsL1.isu
AddRemove-WinPic800 - e:\winpic800\uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-06-06 22:39
Windows 5.1.2600 Service Pack 3 FAT NTAPI
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
Completion time: 2011-06-06 22:44:28
ComboFix-quarantined-files.txt 2011-06-06 20:44
.
Pre-Run: 892 059 648 bytes free
Post-Run: 872 267 776 voľných bajtov
.
- - End Of File - - 9EC916B67B995EF5719A3B12A0D08F39

[Rudy]

Několik položek CF smazal, zbytek logu vypadá čistý. Pokud máte pouze 7GB systémového disku, je to na OS WinXP málo. Budete muset buď něco odinstalovat, nebo si koupit větší disk, příp. ten současný přerozdělit v jiném poměru.

[tirpakf]

Ďakujem za radu.Skôr ako sa rozhodnem o spôsobe riešenia kapacity disku rád by som sa dozvedel niečo o prerozdelení disku.Môže mi niekto poradiť nejaký link,kde by som o tom získal
informácie?Ďakujem.

[Rudy]

Disk se dá rozdělit již při instalaci Win tak, že systémovému disku přidělíte při instalaci pouze část diskové kapacity. Zbytek zůstane volný a lze jej pak dodatečně dotvořit, příp. rozdělit a zformátovat. Jde to přes (klik pravým myšítkem) na tento počítač>spravovat>správa disků.
Pokud již máte disk vytvořen a obsazen daty, musíte použít nějaký diskový manažer (např. Paragon partition manager), kterým do jisté míry můžete změnit velikost jednotlivých logických jednotek. Musíte před použitím defragmentovat disk a jednotky lze zmenšovat jen do té míry, jak velký je na ni volný prostor. Lze tak měnit velikost jedné jednotky na úkor druhé. Většina managerů je ale, bohužel, placených a nejsou v češtině/slovenštině. Některé free najdete na www.stahuj.cz .

[tirpakf]

Rozhodol som sa na výmenu HD.Vymenili mi 7GB disk za 160GB.Myslím,že teraz je to už dobré.
Veľmi pekne ďakujem za rady a niekedy dovidenia na fóre VIRY CZ.

[Rudy]

Nemáte zač!