deleting a icon

[Guest]

I was updating a program and did not noticed that an unwanted program down
loaded. The program installed it self into system tray and it start at boot
up. It looks like a round circle blue insided it with a question mark and
flashes to a red circle with a red line through it. I also get a pop up from
it saying system alert! your computer my be infected by bunch of spyware and
if you click on it open up window explorer and then go to a web site called
spydawn.


so here is my question do I delete this program and get it out of my system
tray.

 

[David Webb]

There are many tools to remove this malware. Here is one:

http://www.bleepingcomputer.com/forums/topic81275.html

Google for more using "remove spydawn" w/o the quotes, as the criteria.

| I was updating a program and did not noticed that an unwanted program down
| loaded. The program installed it self into system tray and it start at boot
| up. It looks like a round circle blue insided it with a question mark and
| flashes to a red circle with a red line through it. I also get a pop up from
| it saying system alert! your computer my be infected by bunch of spyware and
| if you click on it open up window explorer and then go to a web site called
| spydawn.
|
|
| so here is my question do I delete this program and get it out of my system
| tray.

 

[Rock]

I was updating a program and did not noticed that an unwanted program down
loaded. The program installed it self into system tray and it start at
boot
up. It looks like a round circle blue insided it with a question mark and
flashes to a red circle with a red line through it. I also get a pop up
from
it saying system alert! your computer my be infected by bunch of spyware
and
if you click on it open up window explorer and then go to a web site
called
spydawn.


so here is my question do I delete this program and get it out of my
system
tray.

You're computer is infected. See this link.

Malware Removal
http://www.elephantboycomputers.com/page2.html#Removing_Malware

 

[Newbie Coder]

Fredrick,

In some ways I agree with the others that you have an infected computer but
the term 'malware' may not be correct.

Is this doing anything malicious like disabling your firewall or antivirus
software? If so, then the other two are correct, otherwise it could be
adware or spyware which could also sit into the system tray & the term
'malware' is incorrect. A few years ago were quite a few adware apps that
sat in the system tray so this is valid.

You can see how a few 'buzz words' can be used incorrectly, can't you?

One other observation about one of the other two posters is that until 7-14
days ago Rock never knew it was called a system tray from his answers in
other posts.

Just don't want you to get lame advice, that's all.

 

[Newbie Coder]

Fredrick,

Sorry, but I forgot to add this to the previous post I made. Its what you
get when doing many things at once

Press CTRL SHIFT ESC together to get Task Manager up, click the PROCESSES
tab & look for suspect processes. Highlight & then click END TASK. Did it
End task ok or was access denied? If denied then not a lot you can do from
there. If you can end task it & it comes back then you have more than one
process watching its back. One of them is what would replace the registry
run key value.

If you are successful you got the correct process & the icon disappears from
the system tray then what you can do is make a mental note of that name you
just end tasked & search your machine for it. Once found, do your best to
try to delete it & that is 100% the key you want to delete in the reg run
key (see below).

You can go to the Run registry key like so:

Click START
Click RUN
Type 'regedit' (without the quotes) & click OK
Expand the '+' signs until you get to the RUN key which you highlight. Here
are the two registry keys mainly involved:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

In the right pane you will see the entries. If you spot something suspicious
& you are sure, right-click the key in the right pane & delete it. Always
make a backup first.

Next, press F5 (refresh) to see if the key returns. If no, great, but if so
then you have one or more rogue processes still running

If two processes are watching each other then what you need to do is post
back & I will tell you the next steps to do

If you want to try the lazy way then download a free program like Spybot
Seach & Destroy (http://www.spybot.info/en/mirrors/index.html) from one of
these mirrors, install, backup registry, download the updates & run it to
scan & see if that will remove it for you.

Awaiting on your results,

 

[Curt Christianson]

If you want to try the lazy way then download a free program like Spybot

Seach & Destroy (http://www.spybot.info/en/mirrors/index.html) from one of
these mirrors, install, backup registry, download the updates & run it to
scan & see if that will remove it for you.

Also known as a *safer* way!

--
HTH,
Curt

Windows Support Center
http://aumha.org/

 

[Newbie Coder]

Curt,

I wouldn't say its safer at all. It depends on how much you know

You can do more manually than using something like Spybot etc.

 

[Curt Christianson]

No argument there Coder, but when I'm unsure of the expertise a poster has
for Registry work, I always recommend the "safer" although more restrictive
method, rather than finding a subsequent post complaining of a hosed
registry.

--
HTH,
Curt

Windows Support Center
http://aumha.org/

 

[Rock]

Fredrick,

In some ways I agree with the others that you have an infected computer
but
the term 'malware' may not be correct.

Is this doing anything malicious like disabling your firewall or antivirus
software? If so, then the other two are correct, otherwise it could be
adware or spyware which could also sit into the system tray & the term
'malware' is incorrect. A few years ago were quite a few adware apps that
sat in the system tray so this is valid.

You can see how a few 'buzz words' can be used incorrectly, can't you?

One other observation about one of the other two posters is that until
7-14
days ago Rock never knew it was called a system tray from his answers in
other posts.

Just don't want you to get lame advice, that's all.

It's called the notification area. The system tray is a common term for it
from older versions of Windows, but the formal name is notification area.
Where do you come up with your nonsense? Though you did seem to shed some
light on this just recently where you stated you don't have XP installed
and never will have. So why you bother to post in an XP newsgroup is hard
to understand, but it does explain in part the nonsense you sometimes post.

 

[Newbie Coder]

Rock,

Do you know any programming languages or have you used a tool called SPY++?
Please do & then you'll see I am correct.

Here's a little Snippet for you to prove I am correct.

<DllImport("User32.dll", SetLastError:=True)> _
Private Shared Function FindWindowEx(ByVal hwd As Int32, _
ByVal hwd2 As Int32, ByVal sClassName As String, _
ByVal sWindowName As String) As Int32
End Function

Dim intTrayHandle As Int32 = FindWindowEx(0, 0, "Shell_TrayWnd",
vbNullString) <--- see the system tray class (Shell_TrayWnd)?
Dim intButtonHandle As Int32 = FindWindowEx(intTrayHandle, 0, "Button",
vbNullString) <--- see the button class for the start button?

As you see from the above, I use FindWindowEx in the User32.dll, but I could
have used FindWindow API function instead. I used FindWindowEx in the above
example so I didn't have to declare two functions

If you now see IntTrayHandle. This returns the handle of the SystemTray or
its correct name Shell_TrayWnd'
The next line of code above gets the handle to the START button

The notification area name came from Shell_NotifyIcon which is the API
function used to add an icon to the system tray or if you want to split
hairs 'Shell_TrayWnd'

So, Mr Useless Shell MVP. Just shows you how little you really know, doesn't
it? It's called the notification area for lame brains like you.

2 Questions for you:

1) Why do they call them balloon tooltips?
2) Why do they say 'toast' windows not 'notification 'windows?

(both are extremely easy questions to answer)

If you want to look up the API's on the MSDN website or if you are like me,
you use Platform SDK. Would you like me to change it into managed or even
unmanaged C++ for you so you can then see because most of the platform SDK
is written in C++? I know you are lacking any knowledge that is why I am
asking you?

Now, change your signature to:

Dork
Useless Lamebrain or similar, not [MVP Shell/User] (Shell should be removed
& I bet User should be too).

But I am forgetting: If you can do a Google search you get MVP status. Plus
in your case 'Kelly' site too. Sorry, but this is true you don't know much
at all

 

[Newbie Coder]

Rock,

If I remember correctly, SpySheriff was one of those applications that had a
tray icon & was adware not malware. Therefore, my original reply is valid.
You just don't like it because I proved you wrong again

Look at that clear last username registry tweak. Yes, you used the most
common way of doing it, but you forgot to mention the policy way & that is
what I posted a reply about. Plus, you had to go to Kelly's Corner to find
out because you didn't know yourself. Whereas, my reply came from
knowledge/experience.

If you want me to rip all your posts apart then I can if I have time then
we'll show how bad your answers really are.

About the XP bit I wrote:

Why would I want an OS that constantly not responds, error, error, error all
the time, is totally unstable & on service pack 1 million would still be no
good? Why did Microsoft almost immediately release SP 1, then SP 1a &
finally SP2 so quickly?

It doesn't mean I don't have to support it on a daily basis because its part
of my job to do it.

Sure, there will be some users stating they never get errors or their XP OS
is stable, but its a minority.

I have had Vista from Beta 1, Beta 2, RC 1 & RC 2. In its beta stage its
still better than XP, but then again so was the release of Windows 95.

Even Microsoft say XP was the worst OS they have ever done & I have been on
the phone to Microsoft USA many a time slating XP off, proving them wrong
too, & they wrote it. So, as you see even the Microsoft coders don't know
everything about their own product & why was XP such a mess? It was because
they rushed it out.

Now, you are aware why I would not waste my time installing XP for myself.

 

[Nightowl]

Now, change your signature to:

Dork
Useless Lamebrain or similar, not [MVP Shell/User] (Shell should be removed
& I bet User should be too).

But I am forgetting: If you can do a Google search you get MVP status. Plus
in your case 'Kelly' site too. Sorry, but this is true you don't know much
at all

You really have an ego problem. Get some help.

 

[Newbie Coder]

Nightowl,

I am just repaying the niceties from Rock.

He doesn't know what he is doing most of the time & if it wasn't for
MSCONFIG, SYSTEM RESTORE, GOOGLE & KELLY's CORNER he would be totally lost.

But I don't see you giving any positive contributions either

 

[Nightowl]

I am just repaying the niceties from Rock.

Why? If you are as expert as you claim to be, you'd be secure enough not
to have to denigrate anyone else or to constantly harp on about how
clever you are. You have also cast aspersions on Kelly's site and
attacked the MVPs in general. Rest assured, if you are an expert, it'll
come through in your answers; you don't have to keep telling us you are.

He doesn't know what he is doing most of the time

That must be why he gets all those thank-you replies, then?

& if it wasn't for
MSCONFIG, SYSTEM RESTORE, GOOGLE & KELLY's CORNER he would be totally lost.

Even if that were the case, so what? This is a peer support group, not a
programming one. I have no idea what level of coding expertise Rock may
or may not have, but it's irrelevant; the vast majority of posters want
a quick, simple and *safe* fix that they feel competent to carry out.
Time enough to get more complicated if the easy fix doesn't work. The
idea is to help the OP, not start a pissing contest over who knows most.

But I don't see you giving any positive contributions either

Then Google (or rather Google groups) is your friend

 

[Rock]

Rock,

Do you know any programming languages or have you used a tool called
SPY++?
Please do & then you'll see I am correct.

http://www.microsoft.com/resources/..._taskbar_notifications_overview.mspx?mfr=true

http://www.microsoft.com/windowsxp/using/setup/tips/notification.mspx

Give it a rest, you really do have a problem.

 

[Rock]

Rock,

If I remember correctly, SpySheriff was one of those applications that had
a
tray icon & was adware not malware. Therefore, my original reply is valid.
You just don't like it because I proved you wrong again

Look at that clear last username registry tweak. Yes, you used the most
common way of doing it, but you forgot to mention the policy way & that is
what I posted a reply about. Plus, you had to go to Kelly's Corner to find
out because you didn't know yourself. Whereas, my reply came from
knowledge/experience.

If you want me to rip all your posts apart then I can if I have time then
we'll show how bad your answers really are.

About the XP bit I wrote:

Why would I want an OS that constantly not responds, error, error, error
all
the time, is totally unstable & on service pack 1 million would still be
no
good? Why did Microsoft almost immediately release SP 1, then SP 1a &
finally SP2 so quickly?

It doesn't mean I don't have to support it on a daily basis because its
part
of my job to do it.

Sure, there will be some users stating they never get errors or their XP
OS
is stable, but its a minority.

I have had Vista from Beta 1, Beta 2, RC 1 & RC 2. In its beta stage its
still better than XP, but then again so was the release of Windows 95.

Even Microsoft say XP was the worst OS they have ever done & I have been
on
the phone to Microsoft USA many a time slating XP off, proving them wrong
too, & they wrote it. So, as you see even the Microsoft coders don't know
everything about their own product & why was XP such a mess? It was
because
they rushed it out.

Now, you are aware why I would not waste my time installing XP for myself.

Pegasus posted information on editing the registry directly to accomplish
what the OP wanted. Kelly's tweak is a simple way for the OP to make the
change without having to edit the registry themselves. It's an option. You
added a third, the group policy approach. There is no best way in this
circumstance.

You can respond to any of my posts. This is Usenet. But all you do is show
a personal agenda and discredit yourself.

Parts of this post are another example. Do you have a specific source to
quote or a link to justify the statement that MS says XP is the worst OS
they have ever done? That's a ridiculous contention. What do you hope to
accomplish by your ranting? SP1a and SP1 are the same except for the
removal of the MS java virtual machine due to the suit by Sun. There was
nothing unusual in the timing of the service packs. The same timing is
being used with Vista. The minority of people running XP have a stable OS?
Again where do you get this information? Any credible source? How can you
support an OS and not have it installed? That makes no sense either.

You have a major problem, and only you can take care of it. I have tired of
your nonsense. Feel free to post what you want, but I won't be replying.

 

[Newbie Coder]

Rock,

Thanks for the reply

I got the information on BBC news in the UK when they launched XP, Microsoft
Development USA is another source. I have even been many, many, many times
to Microsoft Reading to the seminars... & they say similar things at times

About your Kelly's Corner trick. What are these thigs: They are regestry
keys that you get the user to enter into their own registry, but unlike you,
I have the necessary knowledge to write them myself not have to search the
Internet or particular sites for the registry information

A few months back, I was adding zipped registry keys to the posts or putting
it in & telling the OP how to construct a registry key themselves, but
people like you say don't enter any SCRIPT (wrong word because reg keys are
not scripts) that someone has posted in a reply, yet you will link them to
Kelly's cornet just because its on the Internet & has exactly the same
content as I have put through my own knowledge. How do you know those
Kelly's ones are good? In fact you don't, but because its on the Internet
its a reliable source.

In the service pack thing I mentioned I am not disputing what was in SP1,
SP1a etc just pointing out that Microsoft released SP 1 soon to be followed
by SP 2. If you go back to 98 SE. The night before it was released there was
a news article about 100, 000 other bugs were found to be in it, yet they
still released it instead of holding off for a few months.

It looks as though someone needs to follow your posts because you aren't
always giving out full, correct information. Malke, had a go at me because I
done a reply step-by-step how to go into the registry & do the changed the
OP wanted to get the required result. A fel days earlier you replied to a
post where you basically wrote:

HKEY_LOCAL_MACHINE...\WinLogon (shortened)

I don't see Malke saying to you don't tell the user to go into the registry
because its unsafe. I bet you only did that because you couldn't find the
necessary registry file on Kelly's Corner. See? Malke has selective
criticism too

What MCSE's or MCP's do you have Rock?

Have fun,

 

[Newbie Coder]

Nightowl,

All I am pointing out is if Rock wants to split hairs then we can go to
class level to prove him wrong