Annoying Icon In Notification Area

Discussion in 'Computer Support' started by Charlie, Mar 2, 2006.

  1. Charlie

    Charlie Guest

    I am getting a circular icon with a white cross on a red background in my
    notification area, informing me that my "computer is infected". Initially a
    balloon was popping up, saying that the problem was spyware. I have run
    Spybot S & D and it gives a clear report. I have tried setting "always
    hide", but to no avail. My antivirus software also gives a clear report.

    Could anybody please advise me on this? Thanks in advance.
    Charlie, Mar 2, 2006
    #1
    1. Advertising

  2. Charlie

    Oldus Fartus Guest

    Charlie wrote:
    > I am getting a circular icon with a white cross on a red background in my
    > notification area, informing me that my "computer is infected". Initially a
    > balloon was popping up, saying that the problem was spyware. I have run
    > Spybot S & D and it gives a clear report. I have tried setting "always
    > hide", but to no avail. My antivirus software also gives a clear report.
    >
    > Could anybody please advise me on this? Thanks in advance.
    >
    >


    Do a Google for Spyfalcon removal, and have a good read. It is a
    particularly nasty piece of work which can take a little while to eliminate.

    --
    Cheers
    Oldus Fartus
    Oldus Fartus, Mar 2, 2006
    #2
    1. Advertising

  3. "Charlie" <> wrote in message
    news:du6ub2$bis$...
    >I am getting a circular icon with a white cross on a red background in my
    >notification area, informing me that my "computer is infected". Initially
    >a balloon was popping up, saying that the problem was spyware. I have run
    >Spybot S & D and it gives a clear report. I have tried setting "always
    >hide", but to no avail. My antivirus software also gives a clear report.
    >
    > Could anybody please advise me on this? Thanks in advance.


    I would suggest you start using Process Explorer or PRCView both are free
    and start looking at what's running on the machine, as a hidden process can
    piggy back off of a running process that's undetected by your detection
    software.

    Sometimes, you got to go look for yourself.

    Long

    http://www.windowsecurity.com/artic...d_Rootkit_Tools_in_a_Windows_Environment.html

    Short

    http://tinyurl.com/klw1

    The makers of PE also have a free Root Tool Kit detector and you might want
    to hit the machine with that too.

    Duane :)
    K-Man hater Duane, Mar 2, 2006
    #3
  4. Charlie

    Oldus Fartus Guest

    K-Man hater Duane <g> wrote:
    > "Charlie" <> wrote in message
    > news:du6ub2$bis$...
    >> I am getting a circular icon with a white cross on a red background in my
    >> notification area, informing me that my "computer is infected". Initially
    >> a balloon was popping up, saying that the problem was spyware. I have run
    >> Spybot S & D and it gives a clear report. I have tried setting "always
    >> hide", but to no avail. My antivirus software also gives a clear report.
    >>
    >> Could anybody please advise me on this? Thanks in advance.

    >
    > I would suggest you start using Process Explorer or PRCView both are free
    > and start looking at what's running on the machine, as a hidden process can
    > piggy back off of a running process that's undetected by your detection
    > software.
    >
    > Sometimes, you got to go look for yourself.
    >
    > Long
    >
    > http://www.windowsecurity.com/artic...d_Rootkit_Tools_in_a_Windows_Environment.html
    >
    > Short
    >
    > http://tinyurl.com/klw1
    >
    > The makers of PE also have a free Root Tool Kit detector and you might want
    > to hit the machine with that too.
    >
    > Duane :)
    >
    >


    Have you had the misfortune to come across a spyfalcon infection yet?
    Had my first run-in with it today, and took a fair bit of getting rid
    of. Touch wood, have succeeded now.

    --
    Cheers
    Oldus Fartus
    Oldus Fartus, Mar 2, 2006
    #4
  5. Charlie

    pcbutts1 Guest

    If you have SpyAxe, SpywareStrike, PSGuard, Smitfraud,Spy Sheriff,Sinnaka
    Advertisments or detections for Puper or Alemod that can not seem to be
    removed automatically, please try this automated removal tool.

    AntiPuper v1.2 by secured2k
    http://secured2k.home.comcast.net/tools/AntiPuper.exe

    What does this tool do?
    This tool will attempt to delete several known Trojan files. These files are
    modified by the malware authors and encrypted to avoid detection. The tool
    will now remove parts of SpywareStrike and ask if you want to reset your
    desktop background. If you choose yes, customized desktop options are reset
    to Windows' defaults.
    Fortunately, many of these tend to use the exact same file names. If the
    files are in use, locked, protected, etc, this program will schedule Windows
    to remove the files upon restarting.

    This program will also remove some common security policies that are changed
    by viruses and worms. Policies that lock out your desktop changes, windows
    update, Windows Firewall, Explorer Run policies, Registry editing, and more
    are all reset.

    Finally, if you have an infected Alemod WININET.DLL file, this program will
    try to copy a clean version from your Windows File Protection folder and
    replace the bad copy on restart. If a backup copy can not be found, the tool
    will quickly look for McAfee Antivirus files and attempt to clean a copy of
    the file to replace the bad one on reboot. If all of this fails, you will
    need to manually replace/clean your WININET.DLL file.


    --


    The best live web video on the internet http://www.seedsv.com/webdemo.htm
    NEW Embedded system W/Linux. We now sell DVR cards.
    See it all at http://www.seedsv.com/products.htm
    Sharpvision simply the best http://www.seedsv.com



    "Charlie" <> wrote in message
    news:du6ub2$bis$...
    >I am getting a circular icon with a white cross on a red background in my
    >notification area, informing me that my "computer is infected". Initially
    >a balloon was popping up, saying that the problem was spyware. I have run
    >Spybot S & D and it gives a clear report. I have tried setting "always
    >hide", but to no avail. My antivirus software also gives a clear report.
    >
    > Could anybody please advise me on this? Thanks in advance.
    >
    pcbutts1, Mar 2, 2006
    #5
  6. "Oldus Fartus" <> wrote in message
    news:4407096f$0$21897$...
    > K-Man hater Duane <g> wrote:
    >> "Charlie" <> wrote in message
    >> news:du6ub2$bis$...
    >>> I am getting a circular icon with a white cross on a red background in
    >>> my notification area, informing me that my "computer is infected".
    >>> Initially a balloon was popping up, saying that the problem was spyware.
    >>> I have run Spybot S & D and it gives a clear report. I have tried
    >>> setting "always hide", but to no avail. My antivirus software also
    >>> gives a clear report.
    >>>
    >>> Could anybody please advise me on this? Thanks in advance.

    >>
    >> I would suggest you start using Process Explorer or PRCView both are free
    >> and start looking at what's running on the machine, as a hidden process
    >> can piggy back off of a running process that's undetected by your
    >> detection software.
    >>
    >> Sometimes, you got to go look for yourself.
    >>
    >> Long
    >>
    >> http://www.windowsecurity.com/artic...d_Rootkit_Tools_in_a_Windows_Environment.html
    >>
    >> Short
    >>
    >> http://tinyurl.com/klw1
    >>
    >> The makers of PE also have a free Root Tool Kit detector and you might
    >> want to hit the machine with that too.
    >>
    >> Duane :)

    >
    > Have you had the misfortune to come across a spyfalcon infection yet? Had
    > my first run-in with it today, and took a fair bit of getting rid of.
    > Touch wood, have succeeded now.
    >



    The first and only serious malware infection was with the Code Red Worm back
    in 2001 with IIS. I had one ad worm that Nod32 caught a long time ago. But
    no, my machines don't get infected as I don't run around on the Internet to
    dubious sites or open dubious emails deleting the emails at the POP3 server.

    I just post to others that seem to be getting hammered trying to help them
    by presenting tools to them to track it down when they post that the
    solutions running on the machines can't detect the malware.

    Sometimes, they have got to look for it.

    Duane :)
    K-Man hater Duane, Mar 2, 2006
    #6
  7. Charlie

    Oldus Fartus Guest

    K-Man hater Duane <g> wrote:
    > "Oldus Fartus" <> wrote in message
    > news:4407096f$0$21897$...
    >> K-Man hater Duane <g> wrote:
    >>> "Charlie" <> wrote in message
    >>> news:du6ub2$bis$...
    >>>> I am getting a circular icon with a white cross on a red background in
    >>>> my notification area, informing me that my "computer is infected".
    >>>> Initially a balloon was popping up, saying that the problem was spyware.
    >>>> I have run Spybot S & D and it gives a clear report. I have tried
    >>>> setting "always hide", but to no avail. My antivirus software also
    >>>> gives a clear report.
    >>>>
    >>>> Could anybody please advise me on this? Thanks in advance.
    >>> I would suggest you start using Process Explorer or PRCView both are free
    >>> and start looking at what's running on the machine, as a hidden process
    >>> can piggy back off of a running process that's undetected by your
    >>> detection software.
    >>>
    >>> Sometimes, you got to go look for yourself.
    >>>
    >>> Long
    >>>
    >>> http://www.windowsecurity.com/artic...d_Rootkit_Tools_in_a_Windows_Environment.html
    >>>
    >>> Short
    >>>
    >>> http://tinyurl.com/klw1
    >>>
    >>> The makers of PE also have a free Root Tool Kit detector and you might
    >>> want to hit the machine with that too.
    >>>
    >>> Duane :)

    >> Have you had the misfortune to come across a spyfalcon infection yet? Had
    >> my first run-in with it today, and took a fair bit of getting rid of.
    >> Touch wood, have succeeded now.
    >>

    >
    >
    > The first and only serious malware infection was with the Code Red Worm back
    > in 2001 with IIS. I had one ad worm that Nod32 caught a long time ago. But
    > no, my machines don't get infected as I don't run around on the Internet to
    > dubious sites or open dubious emails deleting the emails at the POP3 server.
    >
    > I just post to others that seem to be getting hammered trying to help them
    > by presenting tools to them to track it down when they post that the
    > solutions running on the machines can't detect the malware.
    >
    > Sometimes, they have got to look for it.
    >
    > Duane :)
    >
    >
    >


    Sorry Duane, you misunderstood me. The infection I was talking about
    was with a client's machine, not one of my own. We all know the type,
    downloads all the cutesy screen savers, uses Incredimail, encourages
    friends to pass on all the jokes and chain mail emails, forwards
    everything she gets to everyone in her address book. And then wonders
    why the machine comes to a halt. Interestingly, she was using a fully
    updated version of Norton. Will have to see whether her habits change
    after getting my bill!

    --
    Cheers
    Oldus Fartus
    Oldus Fartus, Mar 3, 2006
    #7
  8. "Oldus Fartus" <> wrote in message
    news:44078e4b$0$21871$...
    > K-Man hater Duane <g> wrote:
    >> "Oldus Fartus" <> wrote in message
    >> news:4407096f$0$21897$...
    >>> K-Man hater Duane <g> wrote:
    >>>> "Charlie" <> wrote in message
    >>>> news:du6ub2$bis$...
    >>>>> I am getting a circular icon with a white cross on a red background in
    >>>>> my notification area, informing me that my "computer is infected".
    >>>>> Initially a balloon was popping up, saying that the problem was
    >>>>> spyware. I have run Spybot S & D and it gives a clear report. I have
    >>>>> tried setting "always hide", but to no avail. My antivirus software
    >>>>> also gives a clear report.
    >>>>>
    >>>>> Could anybody please advise me on this? Thanks in advance.
    >>>> I would suggest you start using Process Explorer or PRCView both are
    >>>> free and start looking at what's running on the machine, as a hidden
    >>>> process can piggy back off of a running process that's undetected by
    >>>> your detection software.
    >>>>
    >>>> Sometimes, you got to go look for yourself.
    >>>>
    >>>> Long
    >>>>
    >>>> http://www.windowsecurity.com/artic...d_Rootkit_Tools_in_a_Windows_Environment.html
    >>>>
    >>>> Short
    >>>>
    >>>> http://tinyurl.com/klw1
    >>>>
    >>>> The makers of PE also have a free Root Tool Kit detector and you might
    >>>> want to hit the machine with that too.
    >>>>
    >>>> Duane :)
    >>> Have you had the misfortune to come across a spyfalcon infection yet?
    >>> Had my first run-in with it today, and took a fair bit of getting rid
    >>> of. Touch wood, have succeeded now.
    >>>

    >>
    >>
    >> The first and only serious malware infection was with the Code Red Worm
    >> back in 2001 with IIS. I had one ad worm that Nod32 caught a long time
    >> ago. But no, my machines don't get infected as I don't run around on the
    >> Internet to dubious sites or open dubious emails deleting the emails at
    >> the POP3 server.
    >>
    >> I just post to others that seem to be getting hammered trying to help
    >> them by presenting tools to them to track it down when they post that the
    >> solutions running on the machines can't detect the malware.
    >>
    >> Sometimes, they have got to look for it.
    >>
    >> Duane :)
    >>
    >>
    >>

    >
    > Sorry Duane, you misunderstood me. The infection I was talking about was
    > with a client's machine, not one of my own. We all know the type,
    > downloads all the cutesy screen savers, uses Incredimail, encourages
    > friends to pass on all the jokes and chain mail emails, forwards
    > everything she gets to everyone in her address book. And then wonders
    > why the machine comes to a halt. Interestingly, she was using a fully
    > updated version of Norton. Will have to see whether her habits change
    > after getting my bill!
    >


    Well, this power user on the project we were working, brought his computer
    into work complaining that his computer no longer worked. His kids were
    using the computer too and he was doing his banking and other personal
    things on it. The computer had over 70 infections on it.

    The man was doing a BB connection with no FW, no AV, no nothing , the
    kids were downloading/installing to Hell and back and whatever else they
    were doing. I told some of the my co-workers on the team that no wonder the
    project is messed up with that moron being a top power user on the project.
    We would look over at him in the meetings and he would be nodded out
    sometimes damn near snoring. His mouth open head tilted back -- someone tap
    him will ya. He should have had his bank account cleaned out. And it was
    a Win 9'x. I couldn't believe it. I would hate to venture a guess if it was
    a NT based O/S on the infection count, maybe 4 or 5 hundred. :)

    We had to help him to keep him happy. My boy Leo, just formatted it, clean
    installed, free AV, free FW, free what whatever else the whole nine yards
    and some *fere* advice. The man had the nerve to ask Leo could he save it
    if possible. What I told Leo was he should just set the damn thing out on
    the railroad tracks leaving corporate and the plant facilities and let a
    train run over it, as he'll be back. I quit before that happened!

    What can one say about a typical Windows home user and a family. <g>

    Duane :)
    K-Man hater Duane, Mar 3, 2006
    #8
  9. Charlie

    Charlie Guest

    Many thanks to everyone for their advice. Pleased to say the problem is now
    sorted.


    "pcbutts1" <> wrote in message
    news:...
    > If you have SpyAxe, SpywareStrike, PSGuard, Smitfraud,Spy Sheriff,Sinnaka
    > Advertisments or detections for Puper or Alemod that can not seem to be
    > removed automatically, please try this automated removal tool.
    >
    > AntiPuper v1.2 by secured2k
    > http://secured2k.home.comcast.net/tools/AntiPuper.exe
    >
    > What does this tool do?
    > This tool will attempt to delete several known Trojan files. These files
    > are modified by the malware authors and encrypted to avoid detection. The
    > tool will now remove parts of SpywareStrike and ask if you want to reset
    > your desktop background. If you choose yes, customized desktop options are
    > reset to Windows' defaults.
    > Fortunately, many of these tend to use the exact same file names. If the
    > files are in use, locked, protected, etc, this program will schedule
    > Windows to remove the files upon restarting.
    >
    > This program will also remove some common security policies that are
    > changed by viruses and worms. Policies that lock out your desktop changes,
    > windows update, Windows Firewall, Explorer Run policies, Registry editing,
    > and more are all reset.
    >
    > Finally, if you have an infected Alemod WININET.DLL file, this program
    > will try to copy a clean version from your Windows File Protection folder
    > and replace the bad copy on restart. If a backup copy can not be found,
    > the tool will quickly look for McAfee Antivirus files and attempt to clean
    > a copy of the file to replace the bad one on reboot. If all of this fails,
    > you will need to manually replace/clean your WININET.DLL file.
    >
    >
    > --
    >
    >
    > The best live web video on the internet http://www.seedsv.com/webdemo.htm
    > NEW Embedded system W/Linux. We now sell DVR cards.
    > See it all at http://www.seedsv.com/products.htm
    > Sharpvision simply the best http://www.seedsv.com
    >
    >
    >
    > "Charlie" <> wrote in message
    > news:du6ub2$bis$...
    >>I am getting a circular icon with a white cross on a red background in my
    >>notification area, informing me that my "computer is infected". Initially
    >>a balloon was popping up, saying that the problem was spyware. I have run
    >>Spybot S & D and it gives a clear report. I have tried setting "always
    >>hide", but to no avail. My antivirus software also gives a clear report.
    >>
    >> Could anybody please advise me on this? Thanks in advance.
    >>

    >
    >
    Charlie, Mar 3, 2006
    #9
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Falcon

    Strange taskbar behaviour (notification area)

    Falcon, Aug 17, 2004, in forum: Wireless Networking
    Replies:
    0
    Views:
    712
    Falcon
    Aug 17, 2004
  2. =?Utf-8?B?bW9ua2V5b3Bz?=

    notification area icons problem

    =?Utf-8?B?bW9ua2V5b3Bz?=, Nov 21, 2004, in forum: Microsoft Certification
    Replies:
    1
    Views:
    1,057
  3. NiGi aka BLiCK

    Annoying Mail Notification

    NiGi aka BLiCK, Sep 12, 2003, in forum: Computer Support
    Replies:
    2
    Views:
    579
    trout
    Sep 12, 2003
  4. ralph sanchez
    Replies:
    2
    Views:
    594
    Pavel A.
    Mar 17, 2007
  5. =?Utf-8?B?Ymx1bm9vYg==?=

    Volume icon in notification area

    =?Utf-8?B?Ymx1bm9vYg==?=, Feb 2, 2006, in forum: Windows 64bit
    Replies:
    5
    Views:
    422
    =?Utf-8?B?Ymx1bm9vYg==?=
    Feb 3, 2006
Loading...

Share This Page