Ajuda com Ardamax

[Serge~]

Bom gente, eu estava olhando o fórum aqui na seção Fui hackeado/Anti-hacker quando vi o método de verificar se tem o Ardamax, o do alt+0153. eu usei, e deu ™. Mas depois, eu passei o Spybot no pc só por rotina mesmo, e ele acusou que eu tenho um Ardamax! E agora, o que eu faço?

Obrigado pela atenção.

[smileacmexd]

se for um ardamax mesmo, utilize o removedor do proprio site da ardamax

http://www.ardamax.com/aklremover***** troque os *** por .e x e

ele vai tirar o keylogger e os log

[Serge~]

@Dream S.
Valeu por se interessar, cara, aí está o que você me pediu pra por:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ Adobe Photo Downloader Adobe Photoshop Album Starter Edition 3.0 component (Not verified) Adobe Systems Incorporated c:\arquivos de programas\adobe\photoshop album starter edition\3.0\apps\apdproxy*****
+ AVG7_CC AVG Control Center (Not verified) GRISOFT, s.r.o. c:\arquivos de programas\grisoft\avg7\avgcc*****
+ GTKCU c:\arquivos de programas\greatek\gtkcu\gtkcu*****
+ Lexmark 1200 Series Lexmark 1200 Series Button Manager (Not verified) Lexmark International, Inc. c:\arquivos de programas\lexmark 1200 series\lxczbmgr*****
+ NeroFilterCheck NeroCheck (Not verified) Ahead Software Gmbh c:\windows\system32\nerocheck*****
+ RaidTool File not found: C:\Arquivos de programas\VIA\RAID\raid_t
+ SunJavaUpdateSched Java(TM) Platform SE binary (Verified) Sun Microsystems, Inc. c:\arquivos de programas\java\jre1.6.0_03\bin\jusched*****
+ TkBellExe RealNetworks Scheduler (Not verified) RealNetworks, Inc. c:\arquivos de programas\arquivos comuns\real\update_ob\realsched*****
+ WJUP Agent File not found: C:\WINDOWS\system32\28463\WJUP*****
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Inicializar
+ Adobe Reader Speed Launch.lnk Adobe Acrobat SpeedLauncher (Not verified) Adobe Systems Incorporated c:\arquivos de programas\adobe\acrobat 7.0\reader\reader_sl*****
+ Discador Oi Internet.lnk c:\arquivos de programas\oi internet\discaoi*****
+ WinZip Quick Pick.lnk WinZip Executable (Not verified) WinZip Computing, Inc. c:\arquivos de programas\winzip\wzqkpick*****
C:\Documents and Settings\Daniel\Menu Iniciar\Programas\Inicializar
+ Adobe Gamma.lnk Adobe Gamma Loader (Not verified) Adobe Systems, Inc. c:\arquivos de programas\arquivos comuns\adobe\calibration\adobe gamma loader*****
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
+ PhotoShow Deluxe Media Manager Nero PhotoShow Media Manager (Not verified) Ahead Software c:\arquivos de programas\nero\data\xtras\mssysmgr*****
HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components
+ 0 File not found: About:Home
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\SharedTaskScheduler
+ scpLIB scpIBLoad Module (Not verified) Scopus Tecnologia Ltda c:\arquivos de programas\scpad\scplib.dll
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\She llServiceObjectDelayLoad
+ CompIBBrd scpIBLoad Module (Not verified) Scopus Tecnologia Ltda c:\arquivos de programas\scpad\scplib.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Exp lorer\ShellExecuteHooks
+ GbPlugin ShlObj Gbieh Module (Verified) Banco do Brasil S.A. c:\arquivos de programas\gbplugin\gbieh.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\She ll Extensions\Approved
+ 7-Zip Shell Extension c:\arquivos de programas\7-zip\7-zip.dll
+ AVG7 Find Extension AVG Shell Extension (Not verified) GRISOFT, s.r.o. c:\arquivos de programas\grisoft\avg7\avgse.dll
+ AVG7 Shell Extension AVG Shell Extension (Not verified) GRISOFT, s.r.o. c:\arquivos de programas\grisoft\avg7\avgse.dll
+ Extensão do 'Painel de controle' para panorâmica de vídeo File not found: deskpan.dll
+ GbPlugin ShlObj Gbieh Module (Verified) Banco do Brasil S.A. c:\arquivos de programas\gbplugin\gbieh.dll
+ Haali Column Provider c:\arquivos de programas\haali\matroskasplitter\mmfinfo.dll
+ Haali Matroska Shell Property Page c:\arquivos de programas\haali\matroskasplitter\mmfinfo.dll
+ Haali Matroska Thumbnail Exctractor c:\arquivos de programas\haali\matroskasplitter\mmfinfo.dll
+ Shell Extensions for RealOne Player RealPlayer Shell Extensions (Not verified) RealNetworks, Inc. c:\arquivos de programas\real\realplayer\rpshell.dll
+ WinRAR shell extension c:\arquivos de programas\winrar\rarext.dll
+ WinZip WinZip Shell Extension DLL (Not verified) WinZip Computing, Inc. c:\arquivos de programas\winzip\wzshlstb.dll
+ WinZip WinZip Shell Extension DLL (Not verified) WinZip Computing, Inc. c:\arquivos de programas\winzip\wzshlstb.dll
+ WinZip WinZip Shell Extension DLL (Not verified) WinZip Computing, Inc. c:\arquivos de programas\winzip\wzshlstb.dll
+ WinZip WinZip Shell Extension DLL (Not verified) WinZip Computing, Inc. c:\arquivos de programas\winzip\wzshlstb.dll
HKLM\Software\Classes\Folder\Shellex\ColumnHandler s
+ Haali Column Provider c:\arquivos de programas\haali\matroskasplitter\mmfinfo.dll
+ PDF Shell Extension PDF Shell Extension (Not verified) Adobe Systems, Inc. c:\arquivos de programas\adobe\acrobat 7.0\activex\pdfshell.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects
+ AcroIEHlprObj Class Adobe Acrobat IE Helper Version 7.0 for ActiveX (Verified) Adobe Systems, Incorporated c:\arquivos de programas\adobe\acrobat 7.0\activex\acroiehelper.dll
+ GbIehObj Class Gbieh Module (Verified) Banco do Brasil S.A. c:\arquivos de programas\gbplugin\gbieh.dll
+ ssh2 Class scpsssh2 Module (Not verified) Scopus Tecnologia Ltda c:\arquivos de programas\scpad\scpsssh2.dll
+ SSVHelper Class Java(TM) Platform SE binary (Verified) Sun Microsystems, Inc. c:\arquivos de programas\java\jre1.6.0_03\bin\ssv.dll
+ {53707962-6F74-2D53-2644-206D7942484F} Bad download blocker (Verified) Safer Networking Ltd. c:\arquivos de programas\spybot - search & destroy\sdhelper.dll
HKLM\System\CurrentControlSet\Services
+ ACS Gives access to single sign on and a mechanism to communicate with the supplicant for security negotiation. c:\windows\system32\acs*****
+ Avg7Alrt AVG Alert Manager (Not verified) GRISOFT, s.r.o. c:\arquivos de programas\grisoft\avg7\avgamsvr*****
+ Avg7UpdSvc AVG Update Service (Not verified) GRISOFT, s.r.o. c:\arquivos de programas\grisoft\avg7\avgupsvc*****
+ AVGEMS AVG E-Mail Scanner (Not verified) GRISOFT, s.r.o. c:\arquivos de programas\grisoft\avg7\avgemc*****
+ GbpSv Service for G-Buster Browser Defense (Verified) Banco do Brasil S.A. c:\arquivos de programas\gbplugin\gbpsv*****
HKLM\System\CurrentControlSet\Services
+ AegisP AEGIS Protocol (IEEE 802.1x) v3.4.10.0 (Not verified) Meetinghouse Data Communications c:\windows\system32\drivers\aegisp.sys
+ AR5211 Driver for Atheros AR5001 Wireless Network Adapter (Not verified) Atheros Communications, Inc. c:\windows\system32\drivers\ar5211.sys
+ Avg7Core AVG Scanning Engine (Not verified) GRISOFT, s.r.o. c:\windows\system32\drivers\avg7core.sys
+ Avg7RsW AVG Resident Shield Unload Helper (Not verified) GRISOFT, s.r.o. c:\windows\system32\drivers\avg7rsw.sys
+ Avg7RsXP AVG Resident Anti-Virus Shield (Not verified) GRISOFT, s.r.o. c:\windows\system32\drivers\avg7rsxp.sys
+ AvgClean AVG7 Clean Driver (Not verified) GRISOFT, s.r.o. c:\windows\system32\drivers\avgclean.sys
+ AvgTdi AVG Network connection watcher (Not verified) GRISOFT, s.r.o. c:\windows\system32\drivers\avgtdi.sys
+ Changer File not found: C:\WINDOWS\System32\Drivers\Changer.sys
+ hamachi Hamachi Virtual Network Interface Driver (Verified) LogMeIn, Inc. c:\windows\system32\drivers\hamachi.sys
+ i2omgmt File not found: C:\WINDOWS\System32\Drivers\i2omgmt.sys
+ lbrtfdc File not found: C:\WINDOWS\System32\Drivers\lbrtfdc.sys
+ NPF File not found: system32\drivers\npf.sys
+ NTSIM Network Device Monitor Utility (Not verified) VIA Networking Technologies, Inc. c:\windows\system32\ntsim.sys
+ PCIDump File not found: C:\WINDOWS\System32\Drivers\PCIDump.sys
+ PDCOMP File not found: C:\WINDOWS\System32\Drivers\PDCOMP.sys
+ PDFRAME File not found: C:\WINDOWS\System32\Drivers\PDFRAME.sys
+ PDRELI File not found: C:\WINDOWS\System32\Drivers\PDRELI.sys
+ PDRFRAME File not found: C:\WINDOWS\System32\Drivers\PDRFRAME.sys
+ Secdrv SafeDisc driver (Not verified) Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. c:\windows\system32\drivers\secdrv.sys
+ usbsermpt USB Modem Driver (Not verified) Microsoft Corporation c:\windows\system32\drivers\usbsermpt.sys
+ WDICA File not found: C:\WINDOWS\System32\Drivers\WDICA.sys
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
+ __GbPluginBb Gbieh Module (Verified) Banco do Brasil S.A. c:\arquivos de programas\gbplugin\gbieh.dll
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monito rs
+ Microsoft Document Imaging Writer Monitor Microsoft® Document Imaging (Not verified) Microsoft Corporation c:\windows\system32\mdimon.dll
HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvi der\Order
+ ACS GREATEK Wireless LAN File not found: C:\WINDOWS\system32\athgina.dll

[Lord Banjoo]

Cara eu naum confio no AKL remover, msm sendo em site oficial e talz.. recomendo que vc formate o PC.

[-Samurai-]

PRIMEIRO

akele teste nao funciona! eh mentira

segundo : se vc so tiver o ardamax, usando o akl remover voce estava 100% livre dele

terceiro: nao preisa formatar o PC, apenas faça um scan com um bom antivirus, como active virus shied(free), kaspersky (trial), nod32 (trial)

[Lord Banjoo]

PRIMEIRO

akele teste nao funciona! eh mentira

segundo : se vc so tiver o ardamax, usando o akl remover voce estava 100% livre dele

terceiro: nao preisa formatar o PC, apenas faça um scan com um bom antivirus, como active virus shied(free), kaspersky (trial), nod32 (trial)

Eu não tirei minha afirmação da bunda, amigo. Tenho um amigo que faz um scan com o anti-spy e antivirus por MADRUGADA e num desses scans foi detectado um Ardamax e ele baixou o AKL remover (e executou) e trocou a senha e voltou a jogar. Dois dias dps ele foi hacked.

[Gerijeb]

Lol, se você conseguiu ser infectado pelo ardamax, deveria se matar...akele programa até pergunta "Deseja ser infectado pelo ardamax? Sim? Não ?"