Over 1 million tech questions and answers.

Flashing Red and white X in sys tray and constant popups

Q: Flashing Red and white X in sys tray and constant popups

I have no idea what is going on... ad-aware nor search and destroy find anything when I run them.

Popups are coming up like crazy in IE and I dont even use that proggy. I use firefox 99.9 % of the time.

I searched the net and found something called combofix.exe and ran it. That worked but the problem seems to be set on a timer and goes about a half day and viola a popup fest once again.

There are 3 icons installed on my desktop during this time

Error Cleaner
Privacy Protector
Spyware&Malware Protection

There is also a small red with white x in the system try next to the clock. It comes and goes but during the popups this thing is flashing crazy.

I ran through all 5 steps and also attached on the active scan log file from step 1.

The main txt is listed below and the extra txt is also attached per the 5 step process.

Any help is much obliged.

Deckard's System Scanner v20071014.68
Run by ng26970 on 2007-11-29 13:17:26
Computer is in Normal Mode.

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.

-- Last 5 Restore Point(s) --
5: 2007-11-29 19:17:31 UTC - RP5 - Deckard's System Scanner Restore Point
4: 2007-11-29 07:33:11 UTC - RP4 - Installed Ad-Aware 2007
3: 2007-11-29 05:59:58 UTC - RP3 - System Checkpoint
2: 2007-11-28 05:31:41 UTC - RP2 - ComboFix created restore point
1: 2007-11-28 05:31:28 UTC - RP1 - System Checkpoint

Backed up registry hives.
Performed disk cleanup.

-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2007-11-29 13:20:27
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.5730.11)
Boot mode: Normal

Running processes:
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\AspenTech\BPE\AfwSecCliSvc.exe
C:\Program Files\Symantec\Symantec Antivirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\AT&T Global Network Client\NetCfgSv.EXE
C:\Program Files\Common Files\AspenTech Shared\Portmapper\PORTSERV.EXE
C:\Program Files\HP OpenView\Discovery Agent\bin32\discagnt.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\HP OpenView\Discovery Agent\Plugins\usage\discusge.exe
C:\Program Files\Symantec\Symantec Antivirus\Rtvscan.exe
C:\Program Files\Timbuktu Pro\tb2launch.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Symantec\Symantec Antivirus\VPTray.exe
C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
C:\Program Files\ThinkPad\Utilities\TP98TRAY.EXE
C:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXE
C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe
C:\Program Files\Timbuktu Pro\tb2logon.exe
C:\Program Files\ThinkPad\Utilities\EZEJMNAP.EXE
C:\Program Files\Philips\Philips Device Manager\bin\DeviceManager.exe
C:\Program Files\Taskbar Shuffle\taskbarshuffle.exe
C:\Program Files\Philips\Philips Lime Service\bin\LimeAlive.exe
C:\Program Files\Philips\Philips Lime Service\bin\Lime.exe
C:\Program Files\Timbuktu Pro\TimbuktuRemoteConsole.exe
C:\Program Files\MIP\AgentSrv.exe
C:\Program Files\MIP\CBSysTray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\ng26970\Desktop\dss.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php...MjI6Ojg5&lid=2
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.intranet.dow.com/index.htm
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = ftp=inet3.nam.dow.com:80;gopher=inet3.nam.dow.com:80;http=inet3.nam.dow.com:80;https=inet3.nam.dow.com:443
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: MSVPS System - {7E745F86-6B67-45D3-922A-878167A9D258} - C:\WINDOWS\werbetnor.dll
O3 - Toolbar: The hdtip - {7E259026-2CBD-4F42-AB62-230C0D4ABDAD} - C:\WINDOWS\hdtip.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\Progra~1\Symantec\Symant~1\VPTray.exe
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [RunWCW] C:\dowwapps\login\dwalogin.vbs
O4 - HKLM\..\Run: [DIRECT!] C:\Program Files\Courion Corporation\Identity Management Suite DIRECT!\direct.exe
O4 - HKLM\..\Run: [TLogonPath] "C:\Program Files\Timbuktu Pro\Tb2Logon.exe"
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [BLOG] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog
O4 - HKLM\..\Run: [TPKBDLED] C:\WINDOWS\system32\TpScrLk.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [Synchronization Configuration] C:\Dowwapps\scripts\Config_Mobsync_Run.vbs
O4 - HKLM\..\Run: [PSQLLauncher] "C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe" /startup
O4 - HKLM\..\Run: [PhilipsDM] "C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe"
O4 - HKLM\..\RunOnce: [Synchronization Configuration] C:\dowwapps\scripts\config_mobsync_runonce.vbs
O4 - HKCU\..\Run: [Taskbar Shuffle] C:\Program Files\Taskbar Shuffle\taskbarshuffle.exe
O4 - HKCU\..\Run: [PhilipsLime] "C:\Program Files\Philips\Philips Lime Service\bin\LimeAlive.exe"
O4 - HKUS\S-1-5-19\..\Run: [Communicator] "C:\Program Files\Microsoft Office Communicator\Communicator.exe" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Communicator] "C:\Program Files\Microsoft Office Communicator\Communicator.exe" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Communicator] "C:\Program Files\Microsoft Office Communicator\Communicator.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Communicator] "C:\Program Files\Microsoft Office Communicator\Communicator.exe" (User 'Default user')
O4 - Global Startup: clear Recent.lnk = C:\FM3 Projects\PAS\recent clear\clear Recent.bat
O4 - Global Startup: Connected TaskBar Icon.LNK = C:\Program Files\MIP\CBSysTray.exe
O4 - Global Startup: KillTim.lnk = C:\FM3 Projects\PAS\kill timbuktu\KillTim.bat
O4 - Global Startup: Microsoft Office Outlook 2003.lnk = ?
O4 - Global Startup: Mozilla Firefox.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O15 - Trusted Zone: *.epm.pas.com (HKCU)
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O17 - HKLM\Software\..\Telephony: DomainName = dow.com
O17 - HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: Domain = dow.com
O17 - HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: SearchList = dow.com,intranet.dow.com,nam.dow.com,eur.dow.com,lam.dow.com,asa.dow.com,aus.dow.com,afr.dow.com,sct.ucarb.com
O17 - HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: SearchList = dow.com,intranet.dow.com,nam.dow.com,eur.dow.com,lam.dow.com,asa.dow.com,aus.dow.com,afr.dow.com,sct.ucarb.com
O17 - HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: Domain = dow.com
O17 - HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: SearchList = dow.com,intranet.dow.com,nam.dow.com,eur.dow.com,lam.dow.com,asa.dow.com,aus.dow.com,afr.dow.com,sct.ucarb.com
O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL
O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O21 - SSODL: gormet - {7E1CE008-4FA5-4A85-BB15-26C42BE9AF95} - C:\WINDOWS\gormet.dll
O21 - SSODL: pmkret - {8490BC22-8E26-4D8C-AFC3-7F19CC3C4D0D} - C:\WINDOWS\pmkret.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AFW Security Client Service (AfwSecCliSvc) - Aspen Technology, Inc. - C:\Program Files\AspenTech\BPE\AfwSecCliSvc.exe
O23 - Service: Connected Agent Service (AgentSrv) - Connected Corporation - C:\Program Files\MIP\AgentSrv.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec\Symantec Antivirus\DefWatch.exe
O23 - Service: DWSService - The Dow Chemical Company - C:\dowwapps\DWSService\DWSService.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE
O23 - Service: Network Configuration Service (NetCfgSvr) - AT&T - C:\Program Files\AT&T Global Network Client\NetCfgSv.EXE
O23 - Service: NobleNet Portmapper for TCP - Unknown owner - C:\Program Files\Common Files\AspenTech Shared\Portmapper\PORTSERV.EXE
O23 - Service: OpcEnum - OPC Foundation - C:\WINDOWS\system32\OpcEnum.exe
O23 - Service: OracleORAHOME90ClientCache - Unknown owner - C:\ORACLE\ORA90\bin\ONRSD.EXE
O23 - Service: HP OpenView Discovery Agent (prgnDiscAgent) - Unknown owner - C:\Program Files\HP OpenView\Discovery Agent\bin32\discagnt.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SavRoam - symantec - C:\Program Files\Symantec\Symantec Antivirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec\Symantec Antivirus\Rtvscan.exe
O23 - Service: Tb2 Launch (Tb2Launch) - Netopia, Inc. - C:\Program Files\Timbuktu Pro\tb2launch.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\system32\TPHDEXLG.exe

End of file - 12424 bytes

-- File Associations -----------------------------------------------------------

.reg - regfile - DefaultIcon - C:\WINDOWS\Installer\{2505511B-B8E9-4FDF-953A-274563F2B03F}\Icon2505511B.exe,1
.txt - CrimsonEditor.txt - DefaultIcon - C:\Program Files\Crimson Editor\cedttype.ico
.txt - CrimsonEditor.txt - shell\open\command - C:\Program Files\Crimson Editor\cedt.exe "%1"

-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R0 Shockprf - c:\windows\system32\drivers\shockprf.sys <Not Verified; Lenovo; ThinkVantage Active Protection System>
R1 ShockMgr - c:\windows\system32\drivers\shockmgr.sys <Not Verified; Lenovo.; ThinkVantage Active Protection System>
R1 Smapint - c:\windows\system32\drivers\smapint.sys <Not Verified; Microsoft Corporation; Microsoft(R) Windows NT(TM) Operating System>
R1 Tb2Device (TB2 Remote Control Driver) - c:\windows\netopiarc\tb2device.sys
R1 Tb2MirrorSys (TB2 Remote Control Mirror Driver) - c:\windows\netopiarc\tb2mirrorsys.sys <Not Verified; Netopia, Inc.; Netopia Remote Control>
R1 TDSMAPI - c:\windows\system32\drivers\tdsmapi.sys
R1 TPHKDRV - c:\windows\system32\drivers\tphkdrv.sys <Not Verified; IBM Corporation; ThinkPad OnScreenDisplay>
R1 TPPWRIF - c:\windows\system32\drivers\tppwrif.sys
R2 AegisP (AEGIS Protocol (IEEE 802.1x) v3.4.10.0) - c:\windows\system32\drivers\aegisp.sys <Not Verified; Meetinghouse Data Communications; AEGIS Client>
R2 s24trans (WLAN Transport) - c:\windows\system32\drivers\s24trans.sys <Not Verified; Intel Corporation; Intel Wireless LAN Packet Driver>
R2 smihlp (SMI helper driver) - c:\program files\thinkvantage fingerprint software\smihlp.sys <Not Verified; UPEK Inc.; ThinkVantage Fingerprint Software>
R3 pfc (Padus ASPI Shell) - c:\windows\system32\drivers\pfc.sys <Not Verified; Padus, Inc.; Padus(R) ASPI Shell>

S1 InCDPass - c:\windows\system32\drivers\incdpass.sys (file missing)
S1 InCDRm (InCD Reader) - c:\windows\system32\drivers\incdrm.sys (file missing)
S3 catchme - c:\docume~1\ng26970\locals~1\temp\catchme.sys (file missing)
S3 Cpmt (Cisco Media Termination) - c:\windows\system32\drivers\cpmt.sys (file missing)
S3 PCTINDIS5 (PCTINDIS5 NDIS Protocol Driver) - c:\windows\system32\pctindis5.sys <Not Verified; PCTEL Inc.; PCTEL Rawether for Windows>
S3 SMNDIS5 (SMNDIS5 NDIS Protocol Driver) - c:\progra~1\verizo~1\vzacce~1\smndis5.sys (file missing)
S3 StMp3Rec (Player Recovery Device Control Driver) - c:\windows\system32\drivers\stmp3rec.sys <Not Verified; Microsoft Corporation; >
S4 InCDFs (InCD File System) - c:\windows\system32\drivers\incdfs.sys (file missing)

-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 AfwSecCliSvc (AFW Security Client Service) - c:\program files\aspentech\bpe\afwsecclisvc.exe <Not Verified; Aspen Technology, Inc.; Aspen Framework>
R2 DWSService - c:\dowwapps\dwsservice\dwsservice.exe <Not Verified; The Dow Chemical Company; Dow Workstation>
R2 NetCfgSvr (Network Configuration Service) - c:\progra~1\at&tgl~1\netcfgsv.exe <Not Verified; AT&T; NetCfgSvr Module>
R2 NobleNet Portmapper for TCP - "c:\program files\common files\aspentech shared\portmapper\portserv.exe"
R2 prgnDiscAgent (HP OpenView Discovery Agent) - "c:\program files\hp openview\discovery agent\bin32\discagnt.exe"
R2 RegSrvc (Intel(R) PROSet/Wireless Registry Service) - c:\program files\intel\wireless\bin\regsrvc.exe <Not Verified; Intel Corporation; Intel(R) PROSet/Wireless Registry Service>
R2 Tb2Launch (Tb2 Launch) - "c:\program files\timbuktu pro\tb2launch.exe" <Not Verified; Netopia, Inc.; Timbuktu Pro for Windows>
R2 TPHDEXLGSVC (ThinkPad HDD APS Logging Service) - system32\tphdexlg.exe <Not Verified; Lenovo.; ThinkVantage Active Protection System>
R3 AgentSrv (Connected Agent Service) - c:\program files\mip\agentsrv.exe -asv <Not Verified; Connected Corporation; Connected DataProtector>

S3 OpcEnum - c:\windows\system32\opcenum.exe <Not Verified; OPC Foundation; OPC Server Enumerator 1.10>
S3 OracleORAHOME90ClientCache - c:\oracle\ora90\bin\onrsd.exe

-- Device Manager: Disabled ----------------------------------------------------

No disabled devices found.

-- Scheduled Tasks -------------------------------------------------------------

2007-11-29 06:32:16 304 --a------ C:\WINDOWS\Tasks\PMTask.job
2007-11-28 23:45:07 254 --a------ C:\WINDOWS\Tasks\DWS Disk Defrag.job
2007-11-02 19:03:40 272 --a------ C:\WINDOWS\Tasks\DWS Disk Cleanup.job

-- Files created between 2007-10-29 and 2007-11-29 -----------------------------

2007-11-29 13:17:10 0 d-------- S:\Deckard
2007-11-29 13:11:42 0 d-------- C:\Program Files\SpywareBlaster
2007-11-29 01:33:14 0 d-------- C:\Program Files\Lavasoft
2007-11-29 01:33:13 0 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-11-29 01:32:15 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-11-29 01:19:34 0 d-------- C:\WINDOWS\system32\ActiveScan
2007-11-28 12:23:25 0 d-------- C:\WINDOWS\ERUNT
2007-11-28 12:17:31 0 d-------- C:\Documents and Settings\TexasFM3\Application Data\Mozilla
2007-11-28 12:17:14 0 d-------- C:\Documents and Settings\TexasFM3\Application Data\Hummingbird
2007-11-28 12:17:12 0 dr------- C:\Documents and Settings\TexasFM3\My Documents
2007-11-28 12:17:11 0 dr-h----- C:\Documents and Settings\TexasFM3\Recent
2007-11-28 12:17:03 0 d---s---- C:\Documents and Settings\TexasFM3\UserData
2007-11-28 12:17:03 0 d--h----- C:\Documents and Settings\TexasFM3\Templates
2007-11-28 12:17:03 0 dr------- C:\Documents and Settings\TexasFM3\Start Menu
2007-11-28 12:17:03 0 dr-h----- C:\Documents and Settings\TexasFM3\SendTo
2007-11-28 12:17:03 0 d--h----- C:\Documents and Settings\TexasFM3\PrintHood
2007-11-28 12:17:03 1572864 --ah----- C:\Documents and Settings\TexasFM3\ntuser.dat
2007-11-28 12:17:03 0 d--h----- C:\Documents and Settings\TexasFM3\NetHood
2007-11-28 12:17:03 0 d--h----- C:\Documents and Settings\TexasFM3\Local Settings
2007-11-28 12:17:03 0 dr------- C:\Documents and Settings\TexasFM3\Favorites
2007-11-28 12:17:03 0 d-------- C:\Documents and Settings\TexasFM3\Desktop
2007-11-28 12:17:03 0 d--hs---- C:\Documents and Settings\TexasFM3\Cookies
2007-11-28 12:17:03 0 d-------- C:\Documents and Settings\TexasFM3\Application Data
2007-11-28 12:17:03 0 d-------- C:\Documents and Settings\TexasFM3\Application Data\Microsoft
2007-11-27 23:02:38 0 d-------- C:\Program Files\Enigma Software Group
2007-11-27 08:55:09 0 d-------- C:\Documents and Settings\All Users\Application Data\Sync App Settings
2007-11-27 07:16:26 262144 --a------ C:\WINDOWS\werbetnor.dll <Not Verified; ; werbetnor>
2007-11-27 07:16:26 283648 --a------ C:\WINDOWS\pmkret.dll
2007-11-27 07:16:26 81920 --a------ C:\WINDOWS\monhop.exe
2007-11-27 07:16:26 192512 --a------ C:\WINDOWS\hdtip.dll <Not Verified; ; hdtip Module>
2007-11-27 07:16:26 229376 --a------ C:\WINDOWS\gormet.dll
2007-11-26 12:36:12 0 d-------- C:\WINDOWS\DowScanFiles
2007-11-19 14:44:07 0 d-------- C:\Documents and Settings\ng26970\WINDOWS
2007-11-13 12:12:07 1362 --a------ C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
2007-11-08 15:01:26 68096 --a------ C:\WINDOWS\system32\GuitarStudiodll.DLL <Not Verified; Nicolas Manel; Nicolas Manel GuitarStudioDLL>
2007-11-08 15:01:26 32256 --a------ C:\WINDOWS\system32\CmDlgFR.dll <Not Verified; Microsoft Corporation; CMDIALOG>
2007-11-08 15:01:26 100352 --a------ C:\WINDOWS\system32\CmCtlFR.dll <Not Verified; Microsoft Corporation; COMCTL>
2007-11-08 15:01:26 23552 --a------ C:\WINDOWS\system32\CmCt2FR.dll <Not Verified; Microsoft Corporation; Biblioth?que d'objets des contr?les communs Microsoft 2>
2007-11-08 15:01:25 0 d-------- C:\Program Files\Guitar Studio
2007-11-06 08:18:43 0 d-------- C:\Program Files\Spicer
2007-11-06 08:18:43 0 d-------- C:\Documents and Settings\ng26970\Application Data\InstallShield
2007-11-06 08:05:54 0 d-------- C:\Program Files\Documentum

-- Find3M Report ---------------------------------------------------------------

2007-11-29 12:21:20 0 d-------- C:\Program Files\Timbuktu Pro
2007-11-29 12:21:13 0 d-------- C:\Program Files\ThinkVantage Fingerprint Software
2007-11-29 12:21:00 0 d-------- C:\Program Files\Taskbar Shuffle
2007-11-29 12:20:50 0 d-------- C:\Program Files\Symantec
2007-11-29 12:16:55 0 d-------- C:\Program Files\MIP
2007-11-29 12:11:36 0 d-------- C:\Program Files\Common Files\Symantec Shared
2007-11-29 12:10:20 0 d-------- C:\Program Files\AT&T Global Network Client
2007-11-29 12:07:53 0 d-------- C:\Program Files\Acoustica MP3 To Wave Converter PLUS
2007-11-29 11:29:39 0 d-------- C:\Program Files\Microsoft Office Communicator
2007-11-29 11:29:23 0 d-------- C:\Program Files\ViewMail
2007-11-29 02:20:38 0 d-------- C:\Program Files\7-Zip
2007-11-29 01:32:15 0 d-------- C:\Program Files\Common Files
2007-11-27 07:18:27 0 d-------- C:\Documents and Settings\ng26970\Application Data\PSM
2007-11-26 12:33:40 0 d-------- C:\Documents and Settings\ng26970\Application Data\ERS
2007-11-19 16:24:58 0 d-------- C:\Documents and Settings\ng26970\Application Data\Adobe
2007-11-19 1611 0 d-------- C:\Program Files\Common Files\Adobe
2007-11-19 14:46:50 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-11-19 12:37:58 0 d-------- C:\Program Files\SureThing
2007-11-12 11:33:02 0 d-------- C:\Documents and Settings\ng26970\Application Data\AdobeUM
2007-11-06 09:10:37 0 d-------- C:\Documents and Settings\ng26970\Application Data\U3
2007-11-05 09:50:33 0 d-------- C:\Program Files\Java
2007-10-15 11:56:53 0 d-------- C:\Documents and Settings\ng26970\Application Data\OpenOffice.org2
2007-10-15 11:54:26 0 d-------- C:\Program Files\OpenOffice.org 2.3
2007-10-08 09:57:01 0 d-------- C:\Program Files\MSXML 6.0
2007-10-08 07:01:27 0 d-------- C:\Program Files\Lexmark

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7E745F86-6B67-45D3-922A-878167A9D258}]
2007-11-27 05:17 262144 --a------ C:\WINDOWS\werbetnor.dll

"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 06:11]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2006-02-07 06:39]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2006-02-07 06:36]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2006-02-07 06:40]
"SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2006-02-14 12:17]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-02-14 12:16]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2006-03-24 15:14]
"vptray"="C:\Progra~1\Symantec\Symant~1\VPTray.exe" [2006-06-14 23:40]
"TPHOTKEY"="C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe" [2006-07-05 15:15]
"TPTRAY"="C:\PROGRA~1\ThinkPad\UTILIT~1\TP98TRAY.EXE" [2006-04-23 23:53]
"LPManager"="C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe" [2006-01-24 11:03]
"TP4EX"="tp4ex.exe" [2005-10-16 23:11 C:\WINDOWS\system32\TP4EX.exe]
"RunWCW"="C:\dowwapps\login\dwalogin.vbs" []
"DIRECT!"="C:\Program Files\Courion Corporation\Identity Management Suite DIRECT!\direct.exe" [2004-04-27 11:09]
"TLogonPath"="C:\Program Files\Timbuktu Pro\Tb2Logon.exe" [2005-11-16 12:10]
"PWRMGRTR"="C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2005-12-06 23:12]
"BLOG"="C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL" [2005-12-06 23:12]
"TPKBDLED"="C:\WINDOWS\system32\TpScrLk.exe" [2002-10-08 08:28]
"EZEJMNAP"="C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe" [2006-02-24 00:22]
"TpShocks"="TpShocks.exe" [2005-11-07 11:14 C:\WINDOWS\system32\TpShocks.exe]
"Synchronization Configuration"="C:\Dowwapps\scripts\Config_Mobsync_Run.vbs" [2003-04-24 13:11]
"PSQLLauncher"="C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe" [2006-03-24 10:27]
"PhilipsDM"="C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe" [2006-07-13 17:47]

"Taskbar Shuffle"="C:\Program Files\Taskbar Shuffle\taskbarshuffle.exe" [2007-06-16 13:47]
"PhilipsLime"="C:\Program Files\Philips\Philips Lime Service\bin\LimeAlive.exe" [2005-09-08 15:10]

"Synchronization Configuration"=C:\dowwapps\scripts\config_mobsync_runonce.vbs

"Communicator"="C:\Program Files\Microsoft Office Communicator\Communicator.exe"

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
clear Recent.lnk - C:\FM3 Projects\PAS\recent clear\clear Recent.bat [2007-05-04 07:00:42]
Connected TaskBar Icon.LNK - C:\Program Files\MIP\CBSysTray.exe [2007-01-08 16:26:14]
KillTim.lnk - C:\FM3 Projects\PAS\kill timbuktu\KillTim.bat [2007-11-19 13:11:35]
Microsoft Office Outlook 2003.lnk - C:\WINDOWS\Installer\{90120409-6000-11D3-8CFE-0150048383C9}\outicon.exe [2006-08-13 14:10:09]
Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe [2007-01-08 18:24:05]

"disablecad"=0 (0x0)
"RunLogonScriptSync"=1 (0x1)
"HideStartupScripts"=0 (0x0)
"HideShutdownScripts"=0 (0x0)

"NoRemoteRecursiveEvents"=1 (0x1)
"NoRemoteChangeNotify"=1 (0x1)

"DisablePersonalDirChange"=1 (0x1)
"MemCheckBoxInRunDlg"=1 (0x1)

"gormet"= {7E1CE008-4FA5-4A85-BB15-26C42BE9AF95} - C:\WINDOWS\gormet.dll [2007-11-27 05:16 229376]
"pmkret"= {8490BC22-8E26-4D8C-AFC3-7F19CC3C4D0D} - C:\WINDOWS\pmkret.dll [2007-11-27 05:16 283648]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus]
psqlpwd.dll 2006-03-24 10:41 40448 C:\WINDOWS\system32\psqlpwd.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Timbuktu Pro]
C:\Program Files\Timbuktu Pro\Hook32.dll 2005-11-16 12:11 81920 C:\Program Files\Timbuktu Pro\HOOK32.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpfnf2]
notifyf2.dll 2005-07-05 21:45 28672 C:\WINDOWS\system32\notifyf2.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tphotkey]
tphklock.dll 2005-11-30 18:16 24576 C:\WINDOWS\system32\tphklock.dll

"Notification Packages"= scecli psqlpwd

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-1060284298-861567501-682003330-420705\Scripts\Logoff\0\0]
"Script"=C:\Program Files\MIP\DWSBACKUP.vbs


[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{35DFFE62-9F48-4236-9249-9EAB5C7123C9}]
"C:\Program Files\Hummingbird\Connectivity\11.00\Accessories\HumSettings.exe" INSTALL=ALL

-- End of Deckard's System Scanner: finished at 2007-11-29 13:21:21 ------------

Preferred Solution: Flashing Red and white X in sys tray and constant popups

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Flashing Red and white X in sys tray and constant popups

Hi, welcome to TSF!

Sorry for the delay. If you still need help, please post a fresh main.txt log.

Read other 1 answers

There is a system tray alert (yellow triangle with an ! in the middle) flashing, stating there are different malware threats, viruses, worms, etc. Also, it will constantly bring up various websites every 2 minutes while connected to the internet.

The HiJackThis log follows:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:43:21 PM, on 10/22/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\program files\mcafee.com\agent\mcdetect.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm... Read more

Read other answers

I have a hp split 13 x2 E8C05UAR#ABAWhen I use the tablet without keyboard and put it to sleep the white light near the charging plug flashes. I've checked the batteries and both are fully charged. Is this normal or a result of installing windows 10? While at sleep the white light will flash using up battery. If hooked up to the keyboard and put it asleep the white light on the keyboard near the charging plug flashes. Thank you for any information.

Read other answers

My brand new laptop, never damaged, nor dropped has these staticky flickering white lines and dots. The problem started after maby an hour after opening the box and turning it on. Keep in mind i just got it a day ago.

Read other answers

I have a problem with trying to remove popups from my laptop.
Here are a few of system tray popups I am getting.

I also have a problem with IE Popups linking to savetheinformation.com and protectroom.com, and can't remove Security Toolbar 7.1.

Lastly, I cannot remove the following Icons from my Start Menu, or my Desktop.
- Online Security Guide
- Live Safe Center
I can delete them, but within a few minutes, they reappear.


I'm using an ASUS M6R Laptop, Windows XP Pro SP2, Pentium M 1.6GHz, with 640Mb of Ram. I've downloaded the latest Antivirus from Trend Micro, and run a scan, but it did not seem to remove any of those problems.
Here is my HJT Log. Any help would be appreciated. Thanks.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:16:11 PM, on 26/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE... Read more

Read other answers


I have a virus or something that puts a red flashing x in the system tray, give a million pop ups, took over my home page, sometimes shuts down my computer randomly.

I thought I took care of this about a month ago, same problem. I had symantec. I got rid of that and installed kaspersky, which found a ton of stuff (great), but not the one causing this problem. I downloaded some program after a ton of research, and that's what got rid of it for the time being. now it's back.

I don't remember what that program was. it came from a website f-secure.com or something like that. I tried to research this again, but am just finding lots of confusing posts that seem to be resolved, but I can't figure out how or why.

I have hijack this installed...i don't know if you want that or something else, so i will wait for instructions...

thank you very much

A:Red Flashing X In System Tray And Pop Ups

Hello please no HJT log unless we ask,thanks. I think this will fix you up Please follow these instructions.How to remove the Smitfraud / Generic Zlob Now Download Attribune's ATF Cleaner and then SUPERAntiSpyware , Free Home Version. Save both to desktop .. DO NOT run yet.Open SUPER from icon and install and Update itUnder Scanner Options make sure the following are checked (leave all others unchecked):Close browsers before scanning.Scan for tracking cookies.Terminate memory threats before quarantining.Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet.Now reboot into Safe Mode:How to start Windows in Safe ModeDouble-click ATF-Cleaner.exe to run the program.Under Main "Select Files to Delete" choose: Select All.Click the Empty Selected button.If you use Firefox browser click Firefox at the top and choose: Select AllClick the Empty Selected button.If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browser click Opera at the top and choose: Select AllClick the Empty Selected button.If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.NOW Scan with SUPEROpen from the desktop icon or the program Files listOn the left, make sure you check C:\Fixed Drive.Perform a Complete scan. After scan,Verify they are all checked.Click OK on the summary screen to quarantine all found items.If asked if you want to reboot, click "Ye... Read more

Read other 10 answers

Hello everyone --

I have not got a clue about how to approach this problem, so I hope that someone out there can give me some direction.

Here's what happens: Using Outlook 2003,
(1) I open an e-mail message
(2) I hit the reply all button and begin composing a reply;
(3) I need to check a date, so I shrink the reply and the original message;
(4) I click on the Calendar tab and begin innocently clicking on various dates;
(5) THEN . . . while I am looking at the Calendar, the tray icon for my draft reply begins to blink orange in a warning fashion;
(6) THEN . . . the tray icon goes an ominous solid orange and the program freezes.

Why is this happening? Can anyone tell me why and what to do?

Thanks so much.

A:Bad Flashing Orange Tray Icon

Hi, being a goblin(tech dept) I am pretty sure that your comp has some malware infection(haunted), please down from hijackthis to your desktop, then install it from there, then copy the logs it gives and post it bellow to catch the eye of the malware readers.


Read other 3 answers

I am looking for some help to remove the flashing icon from Spylocked as well as to unregister the ygjun.dll that is in my system32 folder.I tried running "cmd" and entered regsvr32 /u ygjun.dll to no avail.I also still have the blasted flashing red null over the blue question mark circle in the tray and would like to remove it. Contacting Spylocked was unsuccessful (I tried their "contact us" link on the website the flashing icon takes you to.)I would really appreciate advice as this is driving me nuts and I need to be sure I have removed all the crap the hoax program (SpyLocked) installed.Thanks.C

A:Ygjun.dll Won't Unregister And Flashing Icon Is Still In Tray

BC instructions for removing Spylocked:http://www.bleepingcomputer.com/forums/t/85376/how-to-remove-spylocked-and-spywarelocked-removal-instructions/Also use Super AntispywareInstall Super Antispyware. Run it in safe mode. Allow it to quarantine whatever it finds. http://www.superantispyware.com/Post a Hijack This log in the Hijack This Forum by following the directions in the link below if the programs above have not removed ALL malware. DO NOT post the log in this forum.http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/ --------------------------------------------------------------------------------Getting into Windows Safe Modehttp://www.computerhope.com/issues/chsafe.htm(pre-Vista OS's)

Read other 2 answers

Cannot see my two green flashing TV screens in the system tray whilst I'm on the internet?
Is there anywhere where I can enable/disable or show/hide ?

A:[SOLVED] Where are my flashing TV screens in System Tray?

Sorry - XP Pro

Read other 3 answers

This all started when I tried downloading a program from a questionable site. If I were to leave my computer running all night there is six or seven pop-ups about how my computer is infected and what I need to buy to get rid of it, or there is pop-ups offering for me to get laid tonight. There are also a few casino pop-ups trying to get me to gamble. These just come up randomly when I am using the computer. There is also a flashing yellow triangle in the system tray, which if i right or left click it does the same thing, goes to a site called thespygaurd.com, to try to get me to purchase an anti-spyware program. The triangle also makes a pretty annoying little popping sound about once a minute. My homepage in Internet Explorer was changed from Google to sysprotectionpage.net and a pop-up comes up that says I have a virus, [email protected], and I should click okay to download software to uninstall it. One more thing, I have installed and ran numerous programs to try and get rid of this. I had a different problem in which a red bubble popped up from the system tray that said I was infected, but I do not remember what the icon was. One of the many programs I used got rid of that problem. I have used Ad-Aware, Ewido, Spybot S&D, Housecall, Bit Defender, and McAfee Stinger. I hope this is enough information, and I really would appreciate any help you could give me on this matter. Thank you very much in advance.Logfile of HijackThis v1.99.1Scan saved at 10:38:11 AM, ... Read more

A:Flashing Yellow Triangle In System Tray With Pop-ups

Please download SmitfraudFix (by S!Ri)Extract the content (a folder named SmitfraudFix) to your Desktop.Open the SmitfraudFix folder and double-click smitfraudfix.cmdSelect option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present). We?ll get them next step.Please copy/paste the content of that report into your next reply.Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.http://www.beyondlogic.org/consulting/proc...processutil.htm

Read other 14 answers

My son has to use a website called coursecompass to take online "tests" or homework. We had to download a testgen plug in. It shows that the plug in downloaded successfully,but when we push the "take test" button, a white box flashes and nothing appears...friend told me to hold down shift key and try...works in a new IE window...but then when we hit "submit" an empty white box appears on top of screen and everything freezes up. Pop-up blocker? Active x thing? I have an instinct it is something easy and IE related..but don't know enough to figure it out!help!!!

Read other answers

hi, I just got something like this yesterday, worked on it awhile no progress, finally just did a system restore, now all good!

A:white x in my system tray

Hi,welcome. I split your topic to it's own as it is easier to work one on one.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install. Alternatively, you can update through MBAM's interface from a clean computer, copy the definitions (rules.ref) located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and ... Read more

Read other 1 answers

I am currently using Zone Alarm's Firewall, I have Norton AntiVirus installed, and Ewido is installed with active-guard. Furthermore, I've run Stinger, AdAware, Spybot, ATF-Cleaner, RogueScan, and SmitRem.... I've tried numerous fixes, and I've also fixed several problems in HJT. I've done all of this in Safe Mode as well, and even turned off the system restore while rebooting, so that the problem wouldn't come back.. No fix I know of seems to eliminate this problem...Fortunately the problem is a little bit better than before...I now can control my web browser's startup page and it seems I've eliminated the spyware quake. I used to have uncontrollable pop-ups but those are gone. I've gotten rid of a trojan dropper and dialer. There was a triangular yellow caution sign in my system tray, associated with the popups and the Internet Explorer hijack, but that is gone now. The only thing that I can't get rid of is a little symbol in the system tray that flashes back and forth between what looks like a green handicap symbol (I honestly don't know what it's supposed to be) and a red "ban" symbol. When I hold my cursor over it it says "Virus Alert!" Every now and then red boxed messages appear telling me I am infected with spyware, trying to get me to go to a site and buy softare. In fact, it takes me to SpywareQuake.com...Any help you can give me is greatly appreciated.Here is my HJT log:Logfile of HijackThis v1.99.1Scan saved at 2:25:59 AM, on 4/15/... Read more

A:"virus Alert!" Icon Flashing In System Tray

Hello Harry83,Download SmitfraudFix (by S!Ri) to your Desktop. http://siri.urz.free.fr/Fix/SmitfraudFix.zip Extract all the files to your Destop. A folder named SmitfraudFix will be created on your Desktop. ______________________________ Please download the trial version of Ewido anti-malware 3.5 from here: http://www.ewido.net/en/download/ Install Ewido anti-malware. When installing, under Additional Options uncheck Install background guard and Install scan via context menu. When you run Ewido for the first time, you could get a warning "Database could not be found!". Click Ok. The program will prompt you to update. Click the Ok button. The program will now go to the main screen.You will need to update Ewido to the latest definition files. On the left-hand side of the main screen click the Update Button. Click on Start.The update will start and a progress bar will show the updates being installed. Once finished updating, close Ewido. ______________________________ Open the SmitfraudFix folder and double-click smitfraudfix.cmd Select option #1 - Search by typing 1 and press Enter This program will scan large amounts of files on your computer for known patterns so please be patient while it works. When it is done, the results of the scan will be displayed and it will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your ne... Read more

Read other 37 answers

Help! I now have this flashing icon in my system tray ; when you click on it it brings you to a site called Anti-Vermins.com. I have tried my Norton 2005, Windows Defender and Advanced Windowcare V2 to remove it but no luck. I became so desperate I purchased XoftSpySE last night to the tune of $39.00 because they claimed they could remove it. No such luck. The only upside to all the cleaning is the computer is actually running faster.

Can you help?

A:Anti-vermin flashing icon in system tray

Read other 10 answers

ok i live in second life a 3D life i dj there build, play my computer has gone from having no issues to having lots with being in this game. i have an AMD Athlon tm 64 X2 Dual Core Processor 4000+ 2.10 GHz - 2 GB Ram - 32 bit system - rating 4.0, Gforce 72oo gfc, 512 memory

ok this is what i am dealing with a flashing white transparent screen or it flashes my desk top and it tells be system or SL is not respouning as well as it seems it is trying to catch up with it's self.

A:flashing white screen

Welcome elfinwood.

Just to clarify... It sounds as if you have been playing Second Life with your computer for a while, which has always worked fine, until recently, where you have this flashing screen problem? When does this problem occur? Is it after playing the game for a while or as soon as you start the game? Or does it start as soon as your turn on the computer?

If it is when you start the game, does it do it when you start other games (games that require good use of the graphics card/system)?

> When was the last time you updated your drivers?
> Have you changed anything before this started to occur, such as installing new updates?

Read other 3 answers

Hi I have a lenovo g500 laptop running windows 10. It has recently started giving me a white flashing screen with bits of grey and vertical lines. It stays on and does not flicker.
I have to turn off the laptop to get the screen back to normal. Moving the screen back and forth doesn't influence it in anyway and all display drivers are up to date.
I have ran a hardware scan (with the lenovo solution center) on the graphics chip and it passed.
The graphics chip is an intel hd 4000.
What could be causing such an issue?

The Sysinfo info:

Tech Support Guy System Info Utility version
OS Version: Microsoft Windows 10 Home, 64 bit
Processor: Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz, Intel64 Family 6 Model 58 Stepping 9
Processor Count: 4
RAM: 3993 Mb
Graphics Card: Intel(R) HD Graphics 4000, 2028 Mb
Hard Drives: C: 424 GB (175 GB Free); D: 24 GB (22 GB Free);
Motherboard: LENOVO, INVALID
Antivirus: Windows Defender, Enabled and Updated

Read other answers

Hello everyone,I have a problem that is starting to get very annoying.Recently when i installed WoW , LoL and some other games on my laptop, there was a problem that occured with the display driver saying '' displayed driver has stopped working and has successfuly recovered'' . Afterwards i reinstalled the newest graphic drivers and i installed the ones that were released with the laptop and the problem still occurs.Can anyone make  a suggestion or help a bit?Kindest regards.

Read other answers

So recently I noticed a blinking white x in a red cricle in my system tray, and now there's 2 of them. It keeps giving me balloon messages says cpu performance affected, internet usage affected, and other times it comes up as a long rectangular popup. When I mouse over them it says malicious software removal tool. This all started after I ran windows malicious software removal tool (or what I thought was it maybe?) Thanks in advance for any help, here's my HJT log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 5:22:18 PM, on 4/21/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16827)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNS... Read more

A:Red Cirlces with White X's in Sytem Tray

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

Read other 2 answers

The red circle with white X in my tray pops up with warnings about infections and says that my computer "might be at risk."I've tried many of the previous postings surrounding this malware. I used SmitFraudFix in safe mode, installed and ran latest Ad-Aware, ran Spybot...nothing seems to work. I'm not all that computer saavy, so I'm asking for help! I have posted my Hijack This Log. Thank you in advance for your assistance.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:24:19 PM, on 9/27/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exeC:\PROGRA~1\McAfee... Read more

A:Malware - Red Circle With White X In Tray

Welcome to the BleepingComputer HijackThis Logs and Analysis forum aaj My name is Richie and i'll be helping you to fix your problems.Download SDFix.exe and save it to your desktop:http://downloads.andymanchesta.com/RemovalTools/SDFix.exe* Double click on SDFix on your desktop,and install the fix to C:\ Please then reboot your computer into Safe Mode by doing the following:* Restart your computer* After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;* Instead of Windows loading as normal, a menu with options should appear;* Select the first option, to run Windows in Safe Mode, then press "Enter".* Choose your usual account.* In Safe Mode,go to and open the C:\SDFix folder,then double click on RunThis.bat to start the script.* Type Y to begin the script.* It will remove the Trojan Services then make some repairs to the registry and prompt you to press any key to Reboot.* Press any Key and it will restart the PC.* Your system will take longer that normal to restart as the fixtool will be running and removing files.* When the desktop loads the Fixtool will complete the removal and display Finished, then press any key to end the script and load your desktop icons.* Finally open the SDFix folder on your desktop and copy and paste the contents of the results file Report.txt into your next reply.Note:If you have previously downloaded ComboFix,please delete that version and download it again from ... Read more

Read other 7 answers

I have gotten some kind of malware or virus on my PC. I've ran Spybot S&D, Adaware and they removed it temporarily but it has returned. I have a red circle with a white X in it in my system tray that every 15 sec or so shows a message saying something to the effect that my computer is affected with spyware and that windows will download the most up to date anti spyware for me. Yesterday before I was able to remove it temporarily it managed to block out my ability to press CTL+ALT=DEL to get too my task manager, removed my desktop background and replaced it with a blue picture with a black box displaying the same message the red circle with the white x displays, and disabled my web browsers. Please help me remove this for good before it does something permanent!
Here is my most current HijackThis Log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:46:29 AM, on 8/27/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\P... Read more

A:Red circle with white x in my system tray

Quick update of something I hadn't noticed before. Now it appears that something is redirecting my searches on google as well. When I click on a link on google it will go through a series of sites and take me to a site that says I have viruses and need to download a program. Just wanted to let you know in case that helps.

Read other 1 answers

I had to restore to an earlier day because I lost my internet connection one day after a storm, and then I had an error with limited connectivity.

I followed along with some steps I read online to get my access back, I don't remember what, and now I have two white bars attached to the sys tray.

I tried changing the display and they are still there.

Please help get rid of these annoying bars, they block part of the screen when I try to play an online game WGT.



Read other answers


I just picked up something that puts a red circle with a white X in the system tray. Now I can't bring up taskmanager or change my backgrounds. I am running Ad-Aware right now, but it hasn't found anything. I downloaded HJT and ran the log, but didn't see anything that sticks out.

I google'd for ideas on what to do, but wasn't having much luck in getting a good response. I thought I would try these forums.

I am about to head off to bed since I start work early in the morning, but I thought I would post quickly to see if anyone might respond by the time I can check in the morning.


A:Red Circle with White X in System Tray

I think that I got it figured out. A friend of mine emailed me something to try out. I download Malwarebytes and booted over into Safe Mode. Once there, I ran the scan and found several objects. I removed the objects and it seems to have cleaned up the issue.

If anyone would like me to look at anything else, please let me know and I will do so when I get home from work tomorrow. I will check the thread during the day to see if anyone posted anything.


Read other 1 answers

Hello, yesterday I got a White X in a Red Circle in my system tray that began posting a buble stating I had spyware. After numerous viras scans and deleting of viruses, the bubble is still there. Here is my hijackthislog:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:49:19 PM, on 5/13/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16640)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exeC:\WINDOWS\System32\CTsvcCDA.exeC:\Program Files\Viewpoint\Common\ViewpointService.exeC:\WINDOWS\System32\MsPMSPSv.exeC:\Program Files\iTunes\iTunesHelper.exeC:\WINDOWS\system32\braviax.ex... Read more

A:White X In A Red Circle In My System Tray

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you. Please go to this page and scroll down to step 6.http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/Follow the directions there to run DSS and then post those logs back here in your next reply.

Read other 3 answers

constant popups and redirects while running firefox, but the popups are from IE 7

here is my hijack this log file

Logfile of HijackThis v1.99.1
Scan saved at 9:34:45 PM, on 1/15/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Running processes:
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Documents and Settings\eric\Desktop\VundoFix.exe
C:\Documents and Settings\eric\Desktop\HJT1991.exe.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer... Read more

Read other answers


There is a virus in my machine( I guess), as there is a flashing icon in my system tray which flashes green and red. On mouse over of the icon says "Virus Alert!". On clicking on the icon gives the message -
Your computer is infected!

Critical System Error! This may cause critical system failure. Please, use antimalware software to clean and protect your system from parasite programs. Click here to get all available softwares.

On Clicking on the message, takes you to http://www.spywarequake.com/?aff=247.

Please advise on how this icon and the associated program can be removed from the system.


A:Flashing Icon in system tray with Virus Alert message

Read other 9 answers

hi i bought my S210 about 6 months ago. ever since ive bought it, an annoying flashing circle pops up now and then in the botton left corner...its causing the page to change if im reading something on kindle. it opens any tab that is under it...whilst im typing it will open any other program...it keeps causing the cursor to go in to the bottom left corner as well. please help as its really putting me off using my ideapad even though i love it! thanks, hajira


Go to Solution.

A:annoying white flashing circle

Hi Hajira,
Welcome to Lenovo Community!
I am sorry to hear that you are facing the issue with display as there are white circles.
Try to update the display drivers and check for the issue.  
Connect to the external monitor and check if there are circles in the monitor.
As you have also mentioned about the cursor try to reduce the sensitivity and update the touchpad drivers.
Hope this helps! Do post us back for further queries.
Best regards,    

Did someone help you today? Press the star on the left to thank them with a Kudo!If you find a post helpful and it answers your question, please mark it as an "Accepted Solution"! This will help the rest of the Community with similar issues identify the verified solution and benefit from it.Follow @LenovoForums on Twitter!

Read other 6 answers

I have a Lenovo all in one unit with a wireless mouse and have just started seeing flashing circles in the middle of the screen at the top and the mouse does not respond
i have re booted several times but still no joy
Any ideas?
Mod's Edit: Moved this post and its reply to its own thread in the Lenovo AIO desktop forum.

A:annoying white flashing circle

Hello MikeJust to let you know you are not alone. If you got a resoltuion please can you let me know. My experience is: I have experienced a simlar issue with my IdeaCenter 700 for the last couple of months, just out of warranty of course! Blobs keep appearing on the screen that take over control of the mouse, act like right clicks and especially then on web browsers start acting as selections - not good when trying to do internet ordering or banking !  This can happen when the PC is initially booted up making it difficult on occasions to enter the password.  I have tried a number of remedies but none successful so any help much appreciated. I have :- used the PC Reset function to re-install the Windows 10 operating system whilst retaining personal files - no difference. - checked the drivers - all are the latest version. - run the full Lenovo hardware scan - nothing identified- run full scans by AVG, Malwarebytes and CClean - no viruses found- used a USB plug-in mouse rather than the wireless mouse   Any other ideas out there ? 

Read other 1 answers

I have a Toshiba Z30 and the white light keeps flashing indicating to me the machine is asleep.

I've tried discharging the laptop by holding down the power button and the light temporarily turns off then blinks orange quickly before going back to flashing white.

Tried removing the battery but it doesn't seem to do anything.

Please help

Read other answers

I have a Toshiba Z30 and the white light keeps flashing indicating to me the machine is asleep.

I've tried discharging the laptop by holding down the power button and the light temporarily turns off then blinks orange quickly before going back to flashing white.

Tried removing the battery but it doesn't seem to do anything, just the orange light for a split second before the white light starts flashing again.

Please help.

Read other answers

a white line always flashing at the bottom of my screen...
plz help

A:white line keep flashing at bottom

What model laptop and does it happen at any screen angle?

Read other 1 answers

I recovered my computer from Norton Ghost 14 and after the POST all I get is a flashing white line at the top left of the screen. Almost like the OS is not installed, but It was definetly set up to recover the OS using Norton. Could it be that the Hard Drive just isn't set as the Primary drive?

A:Flashing White Line on Bootup

Read other 7 answers

Hello experts, I have an IX2-NG which is not booting. It shows a static white led (no flashing). I could connect to my IX2 by RS232 and I could see that the device is not booting. It stops at "Hit any key to stop autoboot: 0" (I've attached the screenshot).I've cleaned the disks with diskpart procedure and with dd command I wrote zImage and Initrd, but that was useless.Do you know what is happening? (ironic on)Do I have to buy a new NAS? Regards.

A:IX2-NG White light (No flashing, static).


boot.PNG ?42 KB

Read other 1 answers

Does anyone know where to find a guide to the LED flashing codes for an Inspiron 11 3153?  On the Dell support website it appears different machines have different meanings to the flashing LED codes.  Mine is flashing 2 amber then 7 white.  Preboot diagnostics passed clean, as did website hosted diagnostics.

Read other answers

Need help in getting rid of the icon. Everytime i click on it, it will direct me to http://www.spylocked.com/?aff=334. If I'm in full-screen mode it will automatically bring me back to window onces in awhile.
Thank for helping in advance.

A:System Tray with White Question Mark.

* Click here to download HJTsetup.exe.
Save HJTsetup.exe to your desktop.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

Read other 3 answers

I have just got a virus or something. It appears as a white x in a red circle in the system tray/taskbar and a popup going on about a virus. I have tried getting rid of it with avg anti virus but that didn't work. Also, i cant open anything like task manager or registry edit without getting a box saying "Warning. Application cannot be executed. The file is infected. Please activate your antivirus software." Because of this i literally cant do anything. Also i keep getting bluescreens. I have dealt with viruses before but with this one i am at a loss.
Your help would greatly appreciated.
Thank you.

Sorry, should have said its vista home premium.
I have added a HJT log file. Im not sure if it matters that i did it in safe mode?

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:51:24, on 31/07/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode

Running processes:
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.mic... Read more

A:White x in a red circle in system tray malware. Help please.

Right I've managed to get rid of the white x in the red circle. I think it was a trojan called smss32.exe
I used this guide from "My anti spyware".
I'm sure the pc is still infected with other spyware because things are not right. I cant use windows update or update windows defender without an error (80072EFE and 0x80072efe respectively) and i keep being redirected in firefox and IE8.
Could you please have a look at this hijackthis log file and let me know if there is anything.
Thank you.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 02:33:08, on 01/08/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Razer\DeathAdder\razerhid.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Razer\DeathAdder\razerofa.exe
C:\Program Fi... Read more

Read other 1 answers

Ive tried smitfraud and everything. I have webroot spysweeper but nothing seems to work. I tried the going into safe mode and smitfraud procedure but nothing seemed to work. Im posting my HJT Log below...Please someone help.

Logfile of HijackThis v1.99.1
Scan saved at 9:23:49 PM, on 4/27/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\Program Files\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Dell Photo AIO Printer 942\dlbubmgr.exe
C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
C:\Program Files\Dell Photo AIO Printer 942\dlbubmon.exe
D:\Program Files\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
D:\Program Files\Spy Sweeper\SpySweeper.exe
C:\Program Files\ATI Multimedia\RemCtrl\ATIX10.exe
C:\Program Files\ATI Multimedia\main\launchpd.exe
C:\Program Files\Secretmaker\secretmaker.exe
C:\Program Files\Sony\VAIO Action Setup\VAServ.exe
C:\WINDOWS\... Read more

A:Solved: Virus Alert Flashing Icon in system tray....need help desperatly..Pls

Read other 16 answers

Hi All --Last weekend I caught what I believe was a case of mssearchnet + nvctrl and perhaps spyfalcon. Using the advice of this site (awesome, thanks!) and some others, I've managed to be back to normal with one really annoying exception: the "Virus Alert!" flashing icon and occassional message ("Your computer is infected! Critical system error! blah blah blah"). The icon is the green wheelchair icon flashing over to the "ban" icon - red circle, single red line running through it. Interesting to note that no link appears to be functioning in the pop-up box. It's just flashing and popping up every so often. I've gone through many other posts on this and have run the following (in safe mode as well as normal boot mode): ad-aware, spybot, ewido, panda, mcafee, stinger. After every re-boot, I'm still greeted by the unwelcome flashing icon. I disabled system restore early in the process as well. Can someone take a look at my HiJack and SmitFraud logs? Much thanks in advance!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Logfile of HijackThis v1.99.1Scan saved at 9:43:50 PM, on 4/24/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\W... Read more

A:"virus Alert!" Icon Flashing In System Tray - Other Issues Solved

...I did a bit more research and looks like the line from the SmitFraud log held the key:

C:\WINDOWS\system32\suprox.dll FOUND !


Booted into safe mode, renamed it, deleted it, and now all seems to be fine.
Even though I didn't have any direct contact with the mods on here, I did learn a whole lot scrolling through these posts. I think this site really provides a great service (especially for the price)! Thanks.

Read other 3 answers

My computer will not fully start up because it always gets stuck on a flashing white line on the top left corner. I have been having issues with my video card recently (ati radeon 4850) where a red light will go on and my monitor will go black therefore making me have to hard reboot my computer. I do not know what this red light means so if someone could help me that we would be awesome as well. This line I was stuck on happened after one of the red light issues so I hard rebooted and that's where I'm stuck now. I am trying to reformat now and it is telling me that no device drivers were found and make sure the installation media contains the right drivers, which makes no sense to me because that has never happened to me, please help.

A:Flashing white line, computer will not boot.

Never mind, this post fixed it. PC won't boot; blinking white light in top left
I put those commands in prompt and it worked. But could someone still help me with this red blinking light I'm still having on my video card.

Read other 1 answers

My S10-3t (new almost exactly a year ago) is not booting. Please note that when I got it I upgraded the RAM to 2gb and the Hard Drive to a 500gb drive that has not failed me. I am using Linux, and threw out all the backup stuff, so that is not an option. The problem is that the battery indicator light is flashing orange and white at the same time (a mix of both colors), and it does this when the battery is in and out. The AC adapter works fine, since the netbook is getting power from it when the battery is out. If you need more info then tell me and I will provide it. TL;DR: The computer does not boot and my battery indicator light is flashing two colors at the same time, no matter if the battery is in or not. The problem is not with the AC adapter. EDIT: Update below.

A:S10-3t Battery light flashing White and Orange

Well, it was like this for a week. Now, after I got home from a movie, it was on (power light and battery indicator were solid white), but the screen was not on. So I took it partially apart (to the point I can access the connection between the sceen and MB), and tried again. It worked. I have no Idea what happend, but any suggestions would help future people with a similar problem. 

Read other 9 answers

hey guys

well yesterday i turned off my pc came back to it turned it on it started up for 3 seconds then the screen went black with one white flashing dash at the top left

if i restart it it happens again. I changed my monitor and it still didint work so i know its my hard drive or something

any help would be greatly appreciated



A:Screen goes black with one white flashing dash

anyone have any ideas?

Read other 5 answers

I'm sorry for the lack of any technical terms used to describe this but I'm a complete novice with computers.

I was watching a video when some warning messages popped up saying something like harmful stuffs trying to access your computer, then it restarted. Now it starts up, goes to the motherboard thing, goes past that then hits a black screen with a little white line flashing in the top left corner.

I've tried to use F8 to enter the safe mode start up but when I press F8 it comes up with



I tried the SATA option twice, first time the white line vanished so it was just a black screen and then it restarted. Second time it just went back to the screen with the white flashing line.

Any help in sorting this out would be greatly appreciated.

A:Black Screen with Flashing White Line

Hello, I'll move this topic to the malware removal forum.Try this please. You will need a USB drive.Download GETxPUD.exe to the desktop of your clean computerRun GETxPUD.exeA new folder will appear on the desktop.Open the GETxPUD folder and click on the get&burn.batThe program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.Click on Start and follow the prompts to burn the image to a CD.Remove the USB & CD and insert it in the sick computerBoot the Sick computer with the CD you just burnedThe computer must be set to boot from the CDGently tap F12 and choose to boot from the CDFollow the promptsA Welcome to xPUD screen will appearPress FileExpand mntsda1,2...usually corresponds to your HDDsdb1 is likely your USBClick on the folder that represents your USB drive (sdb1 ?)Press Tool at the topChoose Open TerminalType the following and press enter:

dd if=/dev/sda of=mbr.bin bs=512 count=1

Press EnterAfter it has finished a file will be located on your USB drive named mbr.binRemove the USB drive and insert it back in your working computer and navigate to mbr.bin, zip it up and attach it to your next reply.This will allow me to have a look at the MasterBootRecord of your drive and see if it is infected.

Read other 2 answers

What is the meaning  of intermittently flashing small white light in right bottom panel of desktop?  Hopefully not signally a hardware or other problem.  Would appreciate explanations.

Read other answers

I am having graphics problems with my IBM Intellistation Z Pro desktop. The graphics card is a NVIDIA Quadro4 980 XGL. Every time I try to open a game, or even Google Earth, I get white and yellow specks flashing all over the screen, the computer freezes up, and I have to reboot it. I have reinstalled the drivers, and cleaned the dust out of the computer, but neither seemed to fix the problem. My operating system is XP. Any suggestions you can give me would be appreciated.


A:White and Yellow Speck Flashing on Screen

Read other 7 answers

I have an HP Pavillion dv6000, running with Windows Vista Home Premium.

When I turn on the computer, the HP intro screen turns on but then immediately goes Black with a white flashing dash in the top left screen. I can not access F8, safe mode, etc. I can only access the basic set up menu.

I never received a restore, or a Windows XP disc. Ive come to terms with the fact that I will most likely would lose my files and am willing to do a restore, but I can not get onto the log on screen. Do i need to see a tech? Please be advised I am not tech savvy and just want to get back on to my computer

Any help/links/disc downloads would be appreciated.

Thanks in advance!

A:Black Screen. White Flashing Dash

Read other 9 answers

Hi, my laptop won't power up. There is a flashing white LED next to the in jack where the AC Adaptor plugs into.  The light flashes 3 times. The light is not on the adapter, it's on the laptop. I left the laptop plugged into the power supply all day, went out and now it won't power up. Thanks,monks

A:Flashing white light next to power input

Hello, Please try hard reset first :  Shut down the notebook, unplug the AC Adapter and then remove the battery.  Hold  down the Power button for a full minute.  Plug in the AC Adapter ( leave the battery out for the moment ) and see if the notebook will start.  You might want to take a look at this document: Battery Does not Power Notebook or Hold a Charge. It suggests troubleshooting steps to determine if the problem is the battery, the power supply, or the system board.You might find the answer to your battery/power issue as you work through the steps in that HP support article. Hope this helps, for any further queries reply to the post and feel free to join us again  **Click the White Thumbs Up Button on the right to say Thanks**Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem. Thank You,GBL84I am not an HP Employee

Read other 1 answers

my screen on my u41-70 laptop flashes black/white when moving the screen up and down (no problem while the screen is stable, but want to fix the problem before it gets really bad) Leif, Norway

Read other answers