Kā gan tu grasies noņemt to, kas nav atrasts? Antivīruss būs to jau sen likvidējis.

Lai nerādītos paziņojums:
start - run - msconfig - startup tab noņem ķeksi pie vajadzīgā.
Nesaprati vai nevari atrast - ignorē vai serviss

Var jau mēģināt arī
http://www.spywareremovalblog.com/remove-pqrs-tmo/
bet man nepatīk liela izmēra sazin ko darošas programmas, to pētīt - nav ne iedvesmas, ne vēlēšanās..

Lai nerādītos paziņojums:
start - run - msconfig - startup tab noņem ķeksi pie vajadzīgā.
Nesaprati vai nevari atrast - ignorē vai serviss

Tur tadu neatradu!

Var jau mēģināt arī
http://www.spywareremovalblog.com/remove-pqrs-tmo/
bet man nepatīk liela izmēra sazin ko darošas programmas, to pētīt - nav ne iedvesmas, ne vēlēšanās..

Tai progai vajadziga license.
Varbut kadam vel kada ideja, vai bezmaksas proga?

MatrixZ rakstīja:

Tur tadu neatradu!

un ko tu veeleejies? lai tur buutu iereaksts - es  te viiruss? :>
iemet startupa skriinsjotu...

ka var ielikt skrisotu??? :))))

NeZiny es paC te JawNinais!

dabuju licensi tai progai, bet vina tapat nenonema. Kur var nokopet startup?Tad varetu paradit, un kads varetu pateikt kas man tur lieks jo kompis baigi sacis bremzet.

http://www.bleepingcomputer.com/tutorials/tutorial42.html
Spyware/Hijacker/Malware Removal -> HijackThis Tutorial

protams vecit paldies par link, ja labi saprastu anglu tad nebutu parasijis palidzibu. :) Meginasu papetit varbut izbursos. :) Bet ka ar tam startup programmam?

sorry, laikam sapratu tomer :))

Kas man no ta visa lieks?? :)))
Running processes:
C:\WINDXP\System32\smss.exe
C:\WINDXP\system32\winlogon.exe
C:\WINDXP\system32\services.exe
C:\WINDXP\system32\lsass.exe
C:\WINDXP\system32\svchost.exe
C:\WINDXP\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDXP\Explorer.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDXP\system32\rundll32.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDXP\system32\RUNDLL32.EXE
C:\Program Files\WebMoney Agent\wmagent.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDXP\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\WINDXP\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDXP\system32\nvsvc32.exe
C:\WINDXP\System32\PAStiSvc.exe
C:\WINDXP\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\WebMoney\WebMoney.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
F2 - REG:system.ini: Shell=Explorer.exe rundll32.exe pqrs.tmo printer
F3 - REG:win.ini: run=
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SITEguard BHO - {1827766B-9F49-4854-8034-F6EE26FCB1EC} - C:\Program Files\Stopzilla!\Toolbar\SZSG.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - (no file)
O2 - BHO: TBSB03223 - {B4806C1A-FE8A-4008-9DA3-8CEDB6E82C10} - C:\Program Files\WebMoney Advisor\wmadvisor.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - (no file)
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: WebMoney Advisor - {3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840} - C:\Program Files\WebMoney Advisor\wmadvisor.dll
O3 - Toolbar: STOPzilla - {98828DED-A591-462F-83BA-D2F62A68B8B8} - C:\Program Files\Stopzilla!\Toolbar\SZSG.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDXP\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDXP\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [wmagent.exe] "C:\Program Files\WebMoney Agent\wmagent.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDXP\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDXP\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDXP\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Cтатистика Веб-Антивируса - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: WebMoney Advisor - {3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840} - C:\Program Files\WebMoney Advisor\wmadvisor.dll
O9 - Extra 'Tools' menuitem: WebMoney Advisor - {3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840} - C:\Program Files\WebMoney Advisor\wmadvisor.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDXP\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDXP\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: Apache - Unknown owner - C:\AppServ\Apache\Apache.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: mysql - Unknown owner - C:\AppServ\mysql\bin\mysqld-nt.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDXP\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDXP\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDXP\system32\PnkBstrB.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDXP\System32\PAStiSvc.exe

Izlabo šo:
F2 - REG:system.ini: Shell=Explorer.exe rundll32.exe pqrs.tmo printer

A no pareja nekas lieks nau?

Protams ir - un daudz, bet tas uz šo problēmu neattiecas.

plz palidzi uzdruka kas vel lieks lai kompis negluci.

Es izravētu visu, kas saistīts ar WebMoney, pirms tam veicot uninstal
C:\Program Files\WebMoney Agent\wmagent.exe
...

Nedomāju, ka īpaši nepieciešams startupā likt QuickTime un Sony
HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions

Laiku pa laikam problēmas rada arī
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

Vienlaicīga vairāku antivīrusu - avast un KAV klātbūtne datorā arī var radīt problēmas.

Kam tev Apache un mysql?

Senx tos itka izdzesu iznemot webmoney tas man vajadzigs. Vel man briziem mozilla baigi bremzejas.

KaNeiet rakstīja:

Es izravētu visu, kas saistīts ar WebMoney, pirms tam veicot uninstal
C:\Program Files\WebMoney Agent\wmagent.exe

driikst jautaat, kaada sunja peec? sjiis nu ir programmas, kuras pasjas nu NEKAADI neinstaleejas un nemaakuliiga uninstall rezultaataa pastaav iespeeja skjirties no  webmoney konta liidzekljiem, mhhhh

#17 tāpēc, ka nelietoju un nedomāju, ka kam tādam būtu jābūt startup, toolbars un visur citur.
Nemākulīgas rīcības rezultātā var ne to vien izdarīt. Nekur neapgalvoju arī, ka tas noteikti būtu jādara konkrētajam lietotājam.

Par "pasjas nu NEKAADI neinstaleejas" gan neesmu pārliecināts - arī Google toolbar, piemēram, instalējas by default kopā ar daudzām citām, ja lietotājs tam nepievērš uzmanību.

Bez tam-
http://wmadvisor.blogspot.com/2008/04/webmoney-advisor.html
Avira Security Suite распознает Ваш продукт как вирус
Доктор Вэб и Касперский классифицирует как вирус.
Kaspersky Internet Security 7.0 ругался что Weboney Advisor - вирус
Это шпионская программа. Поэтому её и не переваривают некоторые антивирусники, и тормозят компы потому что Ваш адвизор сливает все данные о пользователе Вам. Да Вы это и сами прекрасно знаете...
..

#18 ir liela starpiiba starp tevis aprakstiito tresjaas puses spywari webmoney advisor un no offsaita vilkto un speciaali instaleeto webmoney softu, kuraa ietilpst arii dotais webmoneyagent - utiliita, kura klusi seezj trejaa un zinjo par izmainjaam tavaa kontaa, ti. par ienaakosjo naudinju, mhhhh

Iespējams, taču lietotājam ir ne tikai C:\Program Files\WebMoney\ un C:\Program Files\WebMoney Agent\, bet arī C:\Program Files\WebMoney Advisor\ - paskaties pats sarakstā.
Manis pēc lai ravē tikai to, ko pats apraksti kā "tresjaas puses spywari" vai vispār neko neaiztiek

#20 heh, kkaa biju palaidis garaam :>
vainiigs