Spyware, Viruses, & Security forum

General discussion

"HI" Folder on taskbar & yellow triangle in system tray

Are you ready: I've been trying to fix someone's computer and ran into a odd situation. Running XP, Was and somewhat still is infected with desktop.html. have removed all references to desktop.html from registry and computer. Have been unable at this point to get the background to normal. Have tried many of the previous solutions with no resolve. Now to the good stuff. There is a program that starts with windows in normal operating mode. It places a small yellow triangle with a black exclamation point in the system tray. If you left pick or right click it, the program starts IE and brings in the search page "http://www.540.filost.com/randomsites/banner.aspx" . Keep in mind that this icon shows up when windows starts in normal mode, it does not show up in safe mode. Also, when I have been able to change the display properties in safe mode, on restart in normal mode, a "HI" folder/program opens on task bar and the yellow triangle does not show up in system tray; although, if the "hi" folder is picked, then it disappears and the triangle appears. While the "HI" folder is on the task bar, and going to task manager, it shows as a running program. then choosing the process it uses, it goes to explorer.exe. You know what happens when you end task on explorer.exe . Norton, adaware, spybot, can't recognize any problems, Norton's database search showed nothing, computer hope showed nothing also.
This program with no name seen along with the yellow triange in system tray, which states "no title" in taskbar settings, does not stem from startup or regedit run, I have turned off all startup programs, and it still starts up. I have turned off all services and there it is. Has anyone heard of this before???
Thanks in advance.

Discussion is locked
You are posting a reply to: "HI" Folder on taskbar & yellow triangle in system tray
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: "HI" Folder on taskbar & yellow triangle in system tray
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Hi Dave, I would start with all

In reply to: "HI" Folder on taskbar & yellow triangle in system tray

the basic tools first besides the one you have already tried and see if we can name this thing. You said "Have tried many of the previous solutions with no resolve". I don't know what those are because this is a new thread. You've already tried Norton, Ad-Aware and Spybot, try these.

cwshredder (stand alone unit)(another small scanner for certain things, ALL other windows should be closed)
http://www.intermute.com/spysubtract/cwshredder_download.html

Download anti-trojan (any of the following)


The Cleaner Pro 30 days trial - http://www.moosoft.com

TrojanHunter - http://www.misec.net/ (trial)

Also do an online scan at one or all of these.
Housecall (using IE with Active-X)
http://housecall.trendmicro.com/housecall/start_corp.asp

Housecall (all browsers using java)
http://uk.trendmicro-europe.com/enterprise/products/housecall_launch.php

PandaActivescan
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

I would also try Ewido SS. It's been removing a lot of nasty stuff lately. It's got a 14 day trial period but even after the trial period, you only lose the guard process, the scanner is still free.
http://www.ewido.net/en/

Collapse -
start with all

In reply to: Hi Dave, I would start with all

Thanks for the reply. I will use your advise along on the other programs along with CCleaner, Shredder, and Hijackthis that I will take over to the computer. i will let you know the outcome. Will work again on it Friday or Sat. in hopes that I might get some more ideas from others including Norton.
Thanks again for your quik reply.
Dave

Collapse -
Dave use HijackThis as a LAST

In reply to: start with all

resort and if you have to use it, please be careful with it and follow these directions if it DOES come down to using it. HJT is a very powerful tool and only advanced users should use it.

Pls. post your HJT logs in one of the following HJT forums: (NOT here please)

- http://castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html
- http://forums.spywareinfo.com/index.php?showforum=18
- http://forums.subratam.org/index.php?showforum=7

Attention: You have to register to be able to post your HJT log !!


HijackThis download locations:
http://castlecops.com/zx/Merijn/hijackthis.zip
http://www.spywareinfo.com/~merijn/files/HijackThis.exe
http://www.spywareinfo.com/~merijn/files/hijackthis.zip
http://downloads.subratam.org/hijackthis.zip

It is important that you run HijackThis.exe in its own folder so the backup files that HijackThis creates will not be accidentally deleted.

Open 'My Computer', then double-click to open C:\ (or the drive letter that your Windows is installed on)
In the menu bar, click File-->New-->Folder.
That will create a folder named New Folder, which you can rename to ''HJT'' or ''HijackThis''. Now you have C:\HJT\ or C:\HijackThis\ folder. Put your HijackThis.exe there, and double click to run it.

Click 'Scan' button. Click 'Save log' button. Save the 'hijackthis.log' in your desktop. Copy and paste the content of 'hijackthis.log' and post the log file in any forums that offers HijackThis analysis.

Most of what it lists will be harmless, so do not fix anything yet.

Please be PATIENT - For those of you looking for assistance with HJT logs, please be patient. The experts are really swamped with requests to have logs reviewed etc. If they do not get with you immediately it only means they are helping someone else. Remember they do this free of charge and in their spare time so please be patient.

Collapse -
hjthis have used in past

In reply to: Dave use HijackThis as a LAST

I've used Hijackthis in the past, no worries there. From the read, it sounds like Trojan Hunter is the perfect resolve. The symptoms sound identical to there product's capabilities.
I will let you know after I have worked again on the system.
Thanks for your input.
Dave

Collapse -
(NT) (NT) You're welcome Dave, keep us posted.

In reply to: hjthis have used in past

Collapse -
Solutions found

In reply to: (NT) You're welcome Dave, keep us posted.

Good suggestions Roddy. Trojan Hunter removed some and so did Ewido. After their removal of findings, I was able to remove the remaining nasties in the regisrty without any return of virus. The two programs you suggested here were great.
Thank you agin form your input.
Dave

Collapse -
(NT) (NT) You're welcome Dave, glad we could help.

In reply to: Solutions found

Popular Forums

icon
Computer Newbies 10,686 discussions
icon
Computer Help 54,365 discussions
icon
Laptops 21,181 discussions
icon
Networking & Wireless 16,313 discussions
icon
Phones 17,137 discussions
icon
Security 31,287 discussions
icon
TVs & Home Theaters 22,101 discussions
icon
Windows 7 8,164 discussions
icon
Windows 10 2,657 discussions

SMART HOME

This one tip will help you sleep better tonight

A few seconds are all you need to get a better night's rest.