Sì lo sconsiglio.
Il post precedente, l'ho confuso, con un'altro topic.
Questo è il motivo, per cui la mia risposta è sembrata strana.
Per procedere a fare il BuckUP dell'hard disk, si deve fare prima una verifica, che il pc sia pulito da virus.
Non puoi rischiare di fare una copia, di un possibile Hard Disk infetto.

Perchè usando Combofix, non dovrebbe più funzionare il pc.....
Se esegui alla lettera le indicazioni che ti ho dato, non succede niente di grave.
Non farti intimorire dai vari messaggi che ti compariranno, prima della scansione.
Ignorali, e tira dritto per la tua strada.

Comunque se fa la copia del sistema si sente più al sicuro, casomai poi può eliminarla e farne un'altra pulità.

---

alfonso_aiutamici@hotmail.it

Se si blocca significa che ci sono problemi nel sistema.

---

alfonso_aiutamici@hotmail.it

Come posso risolvere questi problemi?

Formattare x me è troppo complicato.
Ora scarico Combofix

Ecco il log di COMBOFIX

ComboFix 10-02-07.07 - Desk 08/02/2010 18.07.03.4.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.39.1040.18.511.246 [GMT 1:00]
Eseguito da: c:\documents and settings\Desk\Desktop\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {00000002-0002-0000-7C25-9E7C08000A00}
.

((((((((((((((((((((((((( Files Creati Da 2010-01-08 al 2010-02-08 )))))))))))))))))))))))))))))))))))
.

2010-02-07 12:22 . 2010-02-07 12:45 37888 ----a-w- c:\windows\system32\setupnt.dll
2010-02-07 12:22 . 2010-02-07 12:45 28928 ----a-w- c:\windows\system32\drivers\tifsfilt.sys
2010-02-07 12:22 . 2010-02-07 12:45 213888 ----a-w- c:\windows\system32\drivers\timntr.sys
2010-02-07 12:22 . 2010-02-07 12:45 82464 ----a-w- c:\windows\system32\drivers\snapman.sys
2010-02-07 12:22 . 2010-02-07 12:45 126976 ----a-w- c:\windows\system32\snapapi.dll
2010-02-07 12:21 . 2010-02-07 12:21 -------- d-----w- c:\programmi\File comuni\Acronis
2010-02-07 12:21 . 2010-02-07 12:21 -------- d-----w- c:\programmi\Acronis
2010-02-05 16:21 . 2010-02-05 16:21 -------- d-----w- c:\programmi\Trend Micro
2010-02-05 12:18 . 2010-02-05 12:18 -------- d-----w- c:\documents and settings\Desk\Dati applicazioni\Auslogics
2010-02-05 12:18 . 2010-02-05 12:18 -------- d-----w- c:\programmi\Auslogics
2010-02-04 16:02 . 2010-02-04 16:02 6144 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Spyware Terminator\sp_rsdel.exe
2010-02-04 16:02 . 2010-02-04 16:02 5632 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Spyware Terminator\fileobjinfo.sys
2010-02-04 16:02 . 2010-02-04 16:02 142592 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys
2010-02-04 16:02 . 2010-02-08 17:02 -------- d-----w- c:\documents and settings\Desk\Dati applicazioni\Spyware Terminator
2010-02-04 16:01 . 2010-02-06 17:27 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Spyware Terminator
2010-02-04 16:01 . 2010-02-07 13:06 -------- d-----w- c:\programmi\Spyware Terminator
2010-02-04 11:38 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-04 11:38 . 2010-02-04 11:38 -------- d-----w- c:\programmi\Malwarebytes' Anti-Malware
2010-02-04 11:38 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-01-19 18:15 . 2009-11-25 10:19 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-01-19 18:15 . 2009-03-30 08:33 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-01-19 18:15 . 2009-02-13 10:29 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-01-19 18:15 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2010-01-19 18:15 . 2010-01-19 18:15 -------- d-----w- c:\programmi\Avira
2010-01-19 18:15 . 2010-01-19 18:15 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Avira
2010-01-19 17:58 . 2010-01-19 17:58 -------- d-----w- C:\AVGTemp
2010-01-14 12:01 . 2010-01-14 12:01 -------- d-----w- c:\documents and settings\Desk\Dati applicazioni\Malwarebytes
2010-01-14 12:01 . 2010-01-14 12:01 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Malwarebytes
2010-01-14 10:56 . 2010-01-14 10:56 -------- d-----w- c:\programmi\TrendMicro
2010-01-14 10:53 . 2010-01-17 12:52 -------- d-----w- C:\HijackThis
2010-01-10 15:55 . 2010-01-10 15:55 -------- d-----w- c:\programmi\VIA Technologies, Inc
2010-01-10 15:55 . 2003-07-04 22:14 32768 ----a-w- c:\windows\system32\UnAudioNT.dll
2010-01-10 14:45 . 2009-11-21 15:54 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-08 12:36 . 2009-03-16 17:41 -------- d-----w- c:\documents and settings\Desk\Dati applicazioni\gtk-2.0
2010-01-20 16:18 . 2009-03-29 12:58 -------- d-----w- c:\programmi\Microsoft Silverlight
2010-01-19 18:18 . 2010-01-21 16:38 594296 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Avira\AntiVir Desktop\FAILSAVE\aescript.dll
2010-01-19 18:18 . 2010-01-21 16:38 127348 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Avira\AntiVir Desktop\FAILSAVE\aescn.dll
2010-01-19 18:18 . 2010-01-21 16:38 479605 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Avira\AntiVir Desktop\FAILSAVE\aerdl.dll
2010-01-19 18:18 . 2010-01-21 16:38 422262 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Avira\AntiVir Desktop\FAILSAVE\aepack.dll
2010-01-19 18:18 . 2010-01-21 16:38 2232695 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Avira\AntiVir Desktop\FAILSAVE\aeheur.dll
2010-01-19 18:18 . 2010-01-21 16:38 237942 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Avira\AntiVir Desktop\FAILSAVE\aehelp.dll
2010-01-19 18:18 . 2010-01-21 16:38 369014 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Avira\AntiVir Desktop\FAILSAVE\aegen.dll
2010-01-19 18:18 . 2010-01-21 16:38 184693 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Avira\AntiVir Desktop\FAILSAVE\aecore.dll
2010-01-18 12:10 . 2009-12-19 10:17 -------- d-----w- c:\documents and settings\Desk\Dati applicazioni\HpUpdate
2010-01-16 14:30 . 2009-09-20 17:05 -------- d-----w- c:\programmi\IObit
2010-01-14 23:29 . 2008-11-11 09:48 -------- d-----w- c:\programmi\AVG
2010-01-05 10:39 . 2008-11-11 09:45 90800 ----a-w- c:\documents and settings\Desk\Impostazioni locali\Dati applicazioni\GDIPFONTCACHEV1.DAT
2010-01-05 09:53 . 2003-04-08 12:00 832512 ----a-w- c:\windows\system32\wininet.dll
2010-01-05 09:53 . 2008-11-11 09:32 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-01-05 09:53 . 2003-04-08 12:00 17408 ----a-w- c:\windows\system32\corpol.dll
2009-12-23 22:04 . 2009-12-20 18:07 -------- d-----w- c:\programmi\WinDS PRO
2009-12-19 10:18 . 2008-11-15 13:31 -------- d-----w- c:\programmi\HP
2009-12-13 11:56 . 2009-12-13 11:56 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\IObit
2009-12-10 09:47 . 2003-04-08 12:00 80730 ----a-w- c:\windows\system32\perfc010.dat
2009-12-10 09:47 . 2003-04-08 12:00 482354 ----a-w- c:\windows\system32\perfh010.dat
2009-11-24 09:12 . 2009-11-24 09:12 152576 ----a-w- c:\documents and settings\Desk\Dati applicazioni\Sun\Java\jre1.6.0_17\lzma.dll
2009-11-24 09:11 . 2009-11-23 13:12 79488 ----a-w- c:\documents and settings\Desk\Dati applicazioni\Sun\Java\jre1.6.0_17\gtapi.dll
2009-11-21 15:54 . 2003-04-08 12:00 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-15 13:07 . 2009-11-15 13:07 2232 ----a-w- c:\windows\java\Packages\Data\J5VN9V9Z.DAT
2009-11-15 13:07 . 2009-11-15 13:07 155995 ----a-w- c:\windows\java\Packages\9NRHJDJJ.ZIP
2009-11-15 13:07 . 2009-11-15 13:07 2678 ----a-w- c:\windows\java\Packages\Data\MNJP3J35.DAT
2009-11-15 13:07 . 2009-11-15 13:07 2678 ----a-w- c:\windows\java\Packages\Data\SLJHZBHV.DAT
2009-11-15 13:07 . 2009-11-15 13:07 2678 ----a-w- c:\windows\java\Packages\Data\8EYZJR1V.DAT
2009-11-15 13:07 . 2009-11-15 13:07 2678 ----a-w- c:\windows\java\Packages\Data\FTR3J5F7.DAT
2009-11-15 13:07 . 2009-11-15 13:07 2678 ----a-w- c:\windows\java\Packages\Data\1FFN97HV.DAT
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\programmi\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"SpywareTerminatorUpdate"="c:\programmi\Spyware Terminator\SpywareTerminatorUpdate.exe" [2010-02-04 3037696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CARPService"="carpserv.exe" [2001-12-23 4608]
"HP Software Update"="c:\programmi\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"PE2CKFNT SE"="c:\programmi\Ulead Systems\Ulead Photo Express 2 SE\ChkFont.exe" [1998-07-03 25088]
"D-Link AirPlus G"="c:\programmi\D-Link\AirPlus G\AirGCFG.exe" [2006-11-17 1552384]
"ANIWZCS2Service"="c:\programmi\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2006-06-29 49152]
"Google Quick Search Box"="c:\programmi\Google\Quick Search Box\GoogleQuickSearchBox.exe" [2009-09-12 122368]
"Adobe Reader Speed Launcher"="c:\programmi\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"SunJavaUpdateSched"="c:\programmi\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"avgnt"="c:\programmi\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"SpywareTerminator"="c:\programmi\Spyware Terminator\SpywareTerminatorShield.exe" [2010-02-04 2166784]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
HP Digital Imaging Monitor.lnk - c:\programmi\HP\Digital Imaging\bin\hpqtra08.exe [2005-12-15 282624]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^Photo Express Calendar Checker SE.lnk]
path=c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\Photo Express Calendar Checker SE.lnk
backup=c:\windows\pss\Photo Express Calendar Checker SE.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Desk^Menu Avvio^Programmi^Esecuzione automatica^CTI Tray Icon.lnk]
path=c:\documents and settings\Desk\Menu Avvio\Programmi\Esecuzione automatica\CTI Tray Icon.lnk
backup=c:\windows\pss\CTI Tray Icon.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 02:14 1695232 ----a-w- c:\programmi\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2009-07-26 15:44 3883856 ----a-w- c:\programmi\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 10:50 155648 ----a-r- c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VoipStunt]
2007-12-13 15:31 8824112 ----a-w- c:\programmi\VoipStunt.com\VoipStunt\VoipStunt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WFXSwtch]
2001-09-10 18:03 27648 ----a-w- c:\progra~1\Symantec\WinFax\WFXSWTCH.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFaxAppPortStarter]
2001-09-10 18:03 45568 ----a-w- c:\windows\system32\WFXSNT40.EXE

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\VoipStunt.com\\VoipStunt\\VoipStunt.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programmi\\Metin2_Italiano\\metin2.bin"=
"c:\\Programmi\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Documents and Settings\\Desk\\Desktop\\Simone\\Emule\\eMule\\emule.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programmi\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Programmi\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=

R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [04/02/2010 17.02.06 142592]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [29/03/2009 13.57.53 54752]
S2 gupdate1ca4128ce09348c;Servizio di Google Update (gupdate1ca4128ce09348c);c:\programmi\Google\Update\GoogleUpdate.exe [29/09/2009 18.17.57 133104]
S3 fsssvc;Servizio Windows Live Family Safety;c:\programmi\Windows Live\Family Safety\fsssvc.exe [05/08/2009 22.48.42 704864]
.
Contenuto della cartella 'Scheduled Tasks'

2010-02-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programmi\Google\Update\GoogleUpdate.exe [2009-09-29 17:17]

2010-02-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programmi\Google\Update\GoogleUpdate.exe [2009-09-29 17:17]

2010-02-07 c:\windows\Tasks\WebReg Deskjet F300 series.job
- c:\programmi\HP\Digital Imaging\bin\hpqwrg.exe [2005-12-15 15:45]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\programmi\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-08 18:12
Windows 5.1.2600 Service Pack 3 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•Ñw*]
"0140211900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------

- - - - - - - > 'winlogon.exe'(576)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(2208)
c:\windows\system32\WININET.dll
.
Ora fine scansione: 2010-02-08 18:15:29
ComboFix-quarantined-files.txt 2010-02-08 17:15
ComboFix2.txt 2010-01-16 13:11

Pre-Run: 47.529.447.424 byte disponibili
Post-Run: 47.559.053.312 byte disponibili

- - End Of File - - CD36316C0C93ED04B60022B1BA30230C

Quindi hai capito perchè il pc si blocca?
Ho dato un'occhiata al log e ho visto che c'è traccia deil Winfax che avevo installato e poi cancellato 1 anno fà circa perchè andava in conflitto col Service Pack 3. Forse non è stato cancellato bene. E' possibile che sia la causa dei problemi che ho con il pc?

Apri un file di testo sul Desktop (start\esegui\digita: notepad.exe e poi clicca Ok
Ci incolli il codice che vedi qui sotto, e salvi il file di testo obbligatoriamente con il nome CFScript



e trascinalo sull'icona di ComboFix.
Attendi la fine dei lavori, senza toccare tastiera, mouse o altro.
Posta il log aggiornato di combofix

Ti appare un foglio del Block Note nel desktop.
Fai il Copia-incolla dello script che ti ho fatto.

poi:
clicca su "File" (in alto a sinistra)
Scegli: "Salva con nome"
Su "nome file" scrivi (o fai copia-incolla) CFScript.txt
Poi clicca "Salva."
Adesso il file di testo lo trovi nel desktop.
tieni premuto il tasto sinistro del mouse sopra il file, e trasportalo sopra l'icona di Combofix.
Partirà la scansione
Lascia fare la scansione, senza toccare niente.
Tutto chiaro?