BleepingComputer.com: Is it just me or does this look suspicious?

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Is it just me or does this look suspicious?

#1 User is offline   snow scorpion 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 35
  • Joined: 21-March 05

Posted 14 April 2010 - 06:58 PM

Last week I managed to catch the Antivirus Suite virus.

I got rid of it but now I have this mysterious icon in my system tray. Does anyone recognize it? I've never seen it before.

Also when I went to Start > Run > msconfig > startup I found this blank space. Could the two be connected to each other and to the Antivirus Suite virus?

Attached File(s)


#2 User is offline   hamluis 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 31,436
  • Joined: 03-September 05
  • Gender:Male
  • Location:Killeen, TX

Posted 14 April 2010 - 07:24 PM

Well...when you pause on or click the icon...what program does it refer to?

There should be no mystery concerning any icon when you should be able to easily see where the trail leads.

Let us know...

As for msconfig and missing startup entries...I suspect that you had a startup item which has now been removed...I would uncheck that item in msconfig.

Louis
Am I Infected, What Do I Do?
Preparation Guide, Malware Log Topics
Using The Report Button
Misplaced Malware Logs
Discussion Forum Rules

#3 User is offline   Andrew 

  • Bleepin' Night Watchman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 7,423
  • Joined: 05-December 05
  • Gender:Not Telling
  • Location:Right behind you

Posted 14 April 2010 - 07:24 PM

The icon kind of looks like an Adobe icon. What, if any, text comes up when you hover the mouse over it?
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.
Posted Image
Boredom Software Stop Highlighting Things

#4 User is offline   computerxpds 

  • Bleepin' Miner
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 3,316
  • Joined: 27-November 09
  • Gender:Male
  • Location:Farmington NY also Rochester NY

Posted 14 April 2010 - 07:34 PM

yeah that definitely is an adobe updater icon.
Posted Image-Welcome To BC!! Follow me on twitter: Posted Image
Please DO NOT PM me for personal help or advice, that is what our forums are for.
If I have replied to a topic and you reply and I havent gotten back to you within 48 hours (2 days) then PM me by going to my profile and clicking the PM button.
Some important links: Malwarebytes|BC Rules|

#5 User is offline   keyboardNinja 

  • Bleepin' Ninja
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 4,791
  • Joined: 19-December 09
  • Gender:Male
  • Location:teh interwebz

Posted 14 April 2010 - 07:40 PM

I can also confirm that that is the new Adobe updater icon (different from the old one).

As for the empty startup entry, I can only assume it was created by the malware. I would follow Louis's advice and uncheck that item.
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#6 User is online   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,345
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 15 April 2010 - 05:42 AM

Do you by any chance own Steam?

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#7 User is offline   snow scorpion 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 35
  • Joined: 21-March 05

Posted 15 April 2010 - 07:29 AM

hamluis and keyboardNinja, I took your advice and unchecked the blank startup entry. I got a message from the computer saying I had to log on as an administrator to make such a change. (I thought that was odd since this my home computer and there is only the one account on it. I've always assumed that account had administrator's rights.) At any rate, after unchecking the entry and restarting the computer the blank entry has disappeared.

keyboardNinja, computerxpds, and Andrew - you guys were right. The system tray icon was the Adobe updater. I feel kind of foolish now. :thumbsup: When three strange things (the virus, the blank start up entry, and the new icon) showed up at more or less the same time, I jumped to the conclusion they were related to each other.

Thanks for the help, everybody. If anything odd occurs I'll be back looking for your wisdom again.

#8 User is offline   snow scorpion 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 35
  • Joined: 21-March 05

Posted 15 April 2010 - 07:31 AM

View Postcryptodan, on Apr 15 2010, 06:42 AM, said:

Do you by any chance own Steam?


Steam? Nope. Don't even know what it is. Google says it's a game site. Is that the one you're talking about?

#9 User is offline   keyboardNinja 

  • Bleepin' Ninja
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 4,791
  • Joined: 19-December 09
  • Gender:Male
  • Location:teh interwebz

Posted 15 April 2010 - 09:37 AM

On behalf of everyone who helped here, you're welcome! :thumbsup:

And yes, Steam is game related. :flowers:
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#10 User is offline   computerxpds 

  • Bleepin' Miner
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 3,316
  • Joined: 27-November 09
  • Gender:Male
  • Location:Farmington NY also Rochester NY

Posted 15 April 2010 - 10:49 AM

As KN said your very welcome.
Posted Image-Welcome To BC!! Follow me on twitter: Posted Image
Please DO NOT PM me for personal help or advice, that is what our forums are for.
If I have replied to a topic and you reply and I havent gotten back to you within 48 hours (2 days) then PM me by going to my profile and clicking the PM button.
Some important links: Malwarebytes|BC Rules|

#11 User is online   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,345
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 15 April 2010 - 12:49 PM

View Postsnow scorpion, on Apr 15 2010, 12:31 PM, said:

View Postcryptodan, on Apr 15 2010, 06:42 AM, said:

Do you by any chance own Steam?


Steam? Nope. Don't even know what it is. Google says it's a game site. Is that the one you're talking about?



The reason I asked is that Steam puts a no name startup item in your run registry key, so I thought that was it.

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users