[Arquivado] &nbspNão consigo instalar antivirus

[fabiohbo 0]

Olá galera,

 

Há um mês atras, entrei em um site ao qual pediu para que eu clica-se em um icone para atualizar o "JAVA", e assim o fiz, porem, o site era malicioso, e infectou de virus o meu PC, sendo assim, o meu antivirus que na epoca era o "AVIRA", ficou louco, e começou a remover varios malwares, e tambem meu PC não abria nenhum programa, nenhum arquivo, e não entrava em nenhum site, sendo que, quando eu tentava abrir algum programa aparecia uma mensagem: "WIN 7 HOME SECURITY" .. e pedia para que eu baixasse esse programa e eu não saia disso, assim sendo, eu tive que 'restaurar o sistema do PC', e após varias tentativas, eu consegui entrar em programas, em sites, mas os malwares ainda estavam no meu PC, ai eu baixei o 'MALWARE BYTES' e o 'SPY BOT', e consegui eliminar alguns virus, mas ainda acho que meu PC possue alguns virus escondidos.

 

Tentei executar o instalador do antivirus 'bitdefender', mas aparece esta mensagem:

"There was a problem with downloading one of the installation files. Please check your connection and try again later."

 

mas eu consigo instalar meu antivirus antigo, o 'avira', mas quando eu instalo, ele já detecta varios virus.

 

Como faço para instalar o antivirus bitdefender e eliminar os virus do meu PC?

 

Abaixo o log do HijackThis:

 

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 13:34:47, on 20/05/2011

Platform: Windows 7 (WinNT 6.00.3504)

MSIE: Internet Explorer v9.00 (9.00.8112.16421)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Common Files\Speedbit\SbUpdate\SBUpdate.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\Winamp\winampa.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\DAP\DAP.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Users\Fábio\Desktop\HijackThis.exe

C:\Users\Fábio\Desktop\bitdefender_antivirus_1.exe

C:\Users\FBIO~1\AppData\Local\Temp\RarSFX1\setupdownloader.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: vShare Toolbar - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL

O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\Program Files\GbPlugin\gbieh.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Download Accelerator Plus Integration - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\DAP\DAPIEL~1.DLL

O3 - Toolbar: vShare Toolbar - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO LOCAL')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO DE REDE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO DE REDE')

O4 - Startup: Plugins

O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm

O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm

O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O15 - Trusted Zone: www.bancobrasil.com.br

O15 - Trusted Zone: www14.bancobrasil.com.br

O15 - Trusted Zone: www2.bancobrasil.com.br

O15 - Trusted Zone: www.bb.com.br

O16 - DPF: {2A781DED-4153-C22D-9812-CEA98A32981C} (GameDesire Makao) - http://cached.gamedesire.com/g_bin/eng/cardsmakao_2_0_0_33.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files\vShare\vshare_toolbar.dll

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O20 - Winlogon Notify: GbPluginBb - C:\Program Files\GbPlugin\gbieh.dll

O23 - Service: Gbp Service (GbpSv) - - C:\PROGRA~1\GbPlugin\GbpSv.exe

O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

 

--

End of file - 5517 bytes

 

Não consigo executar o arquivo DDS.. aparece uma tela do MS-DOS... e logo ela se fecha, e não acontece mais nada depois disso!

Lembrando que meu sistema operacional é o Windows 7 e não estou com nenhum anti-virus instalado em meu PC.

 

Segue o log do GMER:

GMER 1.0.15.15627 - http://www.gmer.net

Rootkit scan 2011-05-21 17:02:10

Windows 6.1.7600 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD800JD-00MSA1 rev.10.01E01

Running: gmer.exe; Driver: C:\Users\FBIO~1\AppData\Local\Temp\uwryrpob.sys

 

 

---- Kernel code sections - GMER 1.0.15 ----

 

.text ntkrnlpa.exe!ZwSaveKeyEx + 13BD 82881589 1 Byte [06]

.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 828A6092 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}

.text user32.dll!FindWindowExA 75FA7184 5 Bytes [E9, 67, 4C, 12, 9A] {JMP 0xffffffff9a124c6c}

.text user32.dll!FindWindowA 75FAA818 5 Bytes [E9, A3, 15, 12, 9A] {JMP 0xffffffff9a1215a8}

.text user32.dll!GetAsyncKeyState 75FAC09A 5 Bytes [E9, F1, E8, 13, 9A] {JMP 0xffffffff9a13e8f6}

.text user32.dll!SetWindowsHookExW 75FB210A 5 Bytes [E9, 61, 7D, 13, 9A] {JMP 0xffffffff9a137d66}

.text user32.dll!GetKeyState 75FB4FDA 5 Bytes [E9, 01, 53, 13, 9A] {JMP 0xffffffff9a135306}

.text user32.dll!GetKeyboardState 75FD6B3E 5 Bytes [E9, ED, 3A, 11, 9A] {JMP 0xffffffff9a113af2}

.text user32.dll!SetWindowsHookExA 75FD6DFA 5 Bytes [E9, E1, 2F, 11, 9A] {JMP 0xffffffff9a112fe6}

 

---- User code sections - GMER 1.0.15 ----

 

.text C:\Windows\system32\services.exe[444] kernel32.dll!FreeLibraryAndExitThread 77973474 5 Bytes JMP 100CFB00 C:\Program Files\GbPlugin\gbieh.dll (Gbieh Module/Banco do Brasil)

.text C:\Windows\system32\services.exe[444] kernel32.dll!FreeLibrary 77981A09 5 Bytes JMP 100CFC70 C:\Program Files\GbPlugin\gbieh.dll (Gbieh Module/Banco do Brasil)

.text C:\Program Files\Microsoft Office\Office14\WINWORD.EXE[640] kernel32.dll!SetUnhandledExceptionFilter 77983162 5 Bytes JMP 62788FA9 C:\Program Files\Common Files\Microsoft Shared\office14\mso.dll (Microsoft Office 2010 component/Microsoft Corporation)

.text C:\Program Files\Microsoft Office\Office14\WINWORD.EXE[640] ole32.dll!OleLoadFromStream 77085BF6 5 Bytes JMP 62CC86A0 C:\Program Files\Common Files\Microsoft Shared\office14\mso.dll (Microsoft Office 2010 component/Microsoft Corporation)

.text C:\Users\Fábio\Desktop\gmer.exe[2756] USER32.dll!FindWindowExA 75FA7184 5 Bytes JMP 100CBDF0 C:\Program Files\GbPlugin\gbieh.dll (Gbieh Module/Banco do Brasil)

.text C:\Users\Fábio\Desktop\gmer.exe[2756] USER32.dll!FindWindowA 75FAA818 5 Bytes JMP 100CBDC0 C:\Program Files\GbPlugin\gbieh.dll (Gbieh Module/Banco do Brasil)

.text C:\Users\Fábio\Desktop\gmer.exe[2756] USER32.dll!GetAsyncKeyState 75FAC09A 5 Bytes JMP 100EA990 C:\Program Files\GbPlugin\gbieh.dll (Gbieh Module/Banco do Brasil)

.text C:\Users\Fábio\Desktop\gmer.exe[2756] USER32.dll!SetWindowsHookExW 75FB210A 5 Bytes JMP 100E9E70 C:\Program Files\GbPlugin\gbieh.dll (Gbieh Module/Banco do Brasil)

.text C:\Users\Fábio\Desktop\gmer.exe[2756] USER32.dll!GetKeyState 75FB4FDA 5 Bytes JMP 100EA2E0 C:\Program Files\GbPlugin\gbieh.dll (Gbieh Module/Banco do Brasil)

.text C:\Users\Fábio\Desktop\gmer.exe[2756] USER32.dll!GetKeyboardState 75FD6B3E 5 Bytes JMP 100EA630 C:\Program Files\GbPlugin\gbieh.dll (Gbieh Module/Banco do Brasil)

.text C:\Users\Fábio\Desktop\gmer.exe[2756] USER32.dll!SetWindowsHookExA 75FD6DFA 5 Bytes JMP 100E9DE0 C:\Program Files\GbPlugin\gbieh.dll (Gbieh Module/Banco do Brasil)

 

---- Devices - GMER 1.0.15 ----

 

Device \Driver\ACPI_HAL \Device\00000043 halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)

 

AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

 

---- EOF - GMER 1.0.15 ----

[wings 22]

*Baixe o RSIT e salve-o no desktop

*Execute-o e clique [Continue]

*Cole o relatório C:\rsit\log.txt

[wings 22]

Tópico Arquivado

 

Como o autor não respondeu por mais de 30 dias, o tópico foi arquivado.

 

Caso você seja o autor do tópico e quer reabrir, envie uma mensagem privada para um moderador da área juntamente com o link para este tópico e explique o motivo da reabertura.