| 1. |
Solve : Unfamiliar icon in toolbar? |
|
Answer» Windows XP just have to find the file that is not deleted and well delete itNot that easy for me..... I ran a full system scan a few days ago and my antivirus found a 'hacktool' and couldn't delete it and i couldn't find it so i ran a screen capture program to capture my antivirus scan while in progress so i can find the path of the hacktool and delete it manually. I was watching my full system scan after it was FINISHED and i found out where it was. It turns out my brother downloaded it to try and find out my msn password.... (he failed)lol I feel completely lost. Dunno how to do a screen capture, or how that could help me at all, and don't know how to determine what file to delete since I don't know what it is or what the "good" files are that I should have. My computer knowledge is much like my knowledge of cars, as in... I know how to drive it, but if I have to pop the hood and POKE around inside there's gonna be trouble. Service packs "unknown" is troubling at first...open Explorer and under the Help menu clik About Windows and this will report what you have... As to the tray item you can go to msconfig and check what is being loaded at startup. Post a list here and we'll walk you thru it.Service packs "unknown" is troubling at first...open Explorer and under the Help menu clik About Windows and this will report what you have... As to the tray item you can go to msconfig and check what is being loaded at startup. Post a list here and we'll walk you thru it. Not sure if it’s because FireFox is my default, but that didn’t work for me. Even when I closed Mozilla and opened IE I couldn’t find the “About Windows” option when I clicked the Help Menu. I did find it in Add/Remove Programs though… Windows XP Service Pack 2, along with all the other upgrades. Is that what we’re looking for? Here’s the list I found at the Open System Configuration Utility Startup Item Command Location ccApp "C:\Program Files\Common Files\Symantic Shared\ccApp.exe" HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run VPTray C:\PROGRA~1\SYMANT~1\VPTray.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run SOUNDMAN SOUNDMAN.EXE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run jusched C:\Program Files\Java|jre1.5.0_04\bin\jusched.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run iTuneHelper “C:\Program Files\iTunes\iTunesHelper.exe” HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run qttask “C:\Program Files\QuickTime\qttask.exe” – atboottime HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run syss32 C:\WINDOWS\syss32.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AOLHostManager C:\Program Files\Common Files\AOL\1139894366\ee\AOLHostManager.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ConnectionManager “C:\Program Files\SBC Yahoo!\Connection Manager\ConnectionManager.exe” HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run IPMon32 “C:\Program Files\SBC Yahoo!\Connection Manager\IP InSight\IPMon32.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run KHALMNPR KHALMNPR.EXE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run GoogleDesktop “C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe”/startup HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Loader C:\WINDOWS\System\loader.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (blank) * (blank) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run SBCSTray C:\Program Files\Sunbelt Software\CounterSpy\SBCSTray.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run msmgs “C:\Program Files\Messenger\msmgs.exe”/background HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run realplay “C:\Program Files\Real\RealPlayer\realplay.exe”/RunUPGToolCommandReBoot HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run LogitechDesktopMessenger C:\Program Files\Logitech\Desktop Messenger\8876480\Program\ LogitechDesktopMessenger.exe HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run YahooMessenger “C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe” -quiet HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run DataViz Inc Messenger C:\PROGRA~1\COMMON~1\DataViz\DVZINC~1.EXE Common Startup HotSync Manager C:\PROGRA~1\palmOne\Hotsync.exe –logon Common Startup LogitechDesktopMessenger C:\PROGRA~1\Logitech\DESKTO~1\8876480\Program\LOGITE~1.EXE –startup Common Startup Logitech SetPoint C:\PROGRA~1\Logitech\SetPoint\SetPoint.exe Common Startup TrueAssistant C:\PROGRA~1\TRUEAS~1\TRUEAS~1.EXE Startup * A box was checked indicating there was a program there but the Startup Item and Command were blank, only the location was shown. I hope this is what you're looking for. Thanks so much for your help!syss32 is a trojan so whatever you used to scan missed it. DLoad update and run AVG Anti-Spyware ( formerly Ewido ) in safe mode with system restore turned off. Then re-boot and dload and run Hijack This and post a log in the Spyware and Virus Forum here and we can take a look.thanks! done and done.Please remember: Do not attempt to run two Antivirus Active Shields at once. Dissable one first if you decide to install and run more than one. Also: a Virus, spyware, and adware scanner are designed to do one thing: Remove the malicious code They may leave behind programs, (such as this # icon). It sounds like you had spyware bundled software. Please try using this as well: http://www.trendmicro.com/hc_intro/default.asp Quote patio said, "Service packs "unknown" is troubling at first...open [highlight]Explorer[/highlight] and under the Help menu clik About Windows and this will report what you have..."He said Explorer, not Internet Explorer. Right click on Start and select Explore to open a Windows Explorer window. Another way to determine your Service Pack is to right click on My Computer, select Properties and select the General tab, if not already showing. |
|