Need some Techie Assistance

**TonyPSchaefer** · 03-29-2005, 10:51 PM

My brother called this evening asking about something his computer has recently started doing. He'd never seen it before, he had tried to explain it to his work tech, but he had no idea what my brother was talking about. So I asked him to do a screen capture and send it to me and now I have no idea what it is.

I'm hoping someone here has seen this before and knows how to get rid of it.

I have removed all personal information to protect his privacy. As you can see, he's accessing his work Outlook mail from his home PC. When he clicks on a message to open it, the following chain of events occur:
1) the "X" icon appears.
2) the IE e runs across the bottom of the screen.
3) IE closes.

At first thought, the "X" thing looks like a pop-up blocker icon. But steps 2 and 3 are pretty dramatic for a pop-up blocker. So then I noticed the icon bar that looks like there's a pop-up blocker enabled. He said that he's had that bar and blocker enabled for about a year and it's always worked beautifully and always in the background.

So what the heck is it?

pjm877 · 03-29-2005, 11:55 PM

Never seen anything like it.. few questions? Is he opening the same message? Or does this happen on every message?

Best guess is if same message: The message has an Outlook Macro and it is trying to do something to "windows" Something is keeping this from happening???

Virus/worm scan the inbox/outlook. Does the Co use symantec corp antivirus??

Another thing to try is open mail box with something that could care less about anything to do with Outlook macro's and the such... I do not use Outlook for my mail handler for this reason.. too many e-mail worms out there... and work is a Lotus Notes env.

One other thing to check is the symantec/MacFee data bases and see they have anything that looks like this discribed.

Good luck.

**Tideland Prius** · 03-30-2005, 12:40 AM

I would lean towards the possibility of a virus especially if that only occurs when a particular message is highlighted

DaveinOlyWA · 03-30-2005, 12:52 AM

kinda looks like an external message that isnt available as a preview. these are almost always spam and one of the prime ways to spread spyware.

another thing could be the fact that he is accessing work email. could it be a conflict with permissions with viewing external images remotely?

does it happen on all messages or just some of them?

zielin · 03-30-2005, 01:14 AM

Here's what I would do to begin troubleshooting...

1) Make sure he has some sort of antivirus software installed (Norton is my favorite), and run a scan.

2) Check for spyware. There are several programs out there to do this. My favorite is a program called Spybot Search & Destroy. You can get it here http://www.safer-networking.org/en/download/index.html.

3) Go to the "Run..." command on your start menu and type in msconfig. When the System Configuration Utility window pops up select the startup tab. The list displayed is a list of all the programs that start up with your computer. Uncheck anything that is not vital. You can usually guess at what a file is for based on the path and file name. If you're unsure about a file try googling for it and see what turns up.
So once you have a minimum set of applications restart your computer and see if the problem goes away. If it does, then you know that one of the apps you disabled is most likely the problem. So start enabling the apps again one by one until the problem comes back. When it shows up again, you'll know what the culprit is.

Also, if you suspect that it might be the popup blocker then just try disabling the popup blocker first and see if it goes away.

**TonyPSchaefer** · 03-30-2005, 09:37 AM

Thanks, guys.
Let's see if I can answer a few questions correctly, based on the information he gave me last night.

Is he opening the same message? Or does this happen on every message?
This point never came up, but I'm guessing that he would have tried several messages rather than the some one over and over. I'm reminded of Frued's definition of insanity.

Make sure he has some sort of antivirus software installed (Norton is my favorite), and run a scan.
He has Norton installed at home and knows that it automatically updates regularly. I can't speak for the last time he did a full-out system scan.

Check for spyware.
I sent him links for "ToniArts Easy Cleaner", "Search and Destroy", and "HiJack This!". That was late last night and I doubt he's used them yet.

The list displayed is a list of all the programs that start up with your computer.
Easy Cleaner has a similar function.

Additional Information:
He recently (not sure how recently) installed the M$ Antivirus Software and he does the M$ Updates when available. I think he has SP2 installed.

03-29-2005, 10:51 PM	#1
TonyPSchaefer Ruler of Omicron Persei 8 Join Date: May 2004 Location: Far-North Chicagoland Posts: 8,413 My Car: 2004 Prius Package: #9 Nominated 4 Times in 2 Posts TOTM Awards: 0 Friends: 16	Need some Techie Assistance My brother called this evening asking about something his computer has recently started doing. He'd never seen it before, he had tried to explain it to his work tech, but he had no idea what my brother was talking about. So I asked him to do a screen capture and send it to me and now I have no idea what it is. I'm hoping someone here has seen this before and knows how to get rid of it. I have removed all personal information to protect his privacy. As you can see, he's accessing his work Outlook mail from his home PC. When he clicks on a message to open it, the following chain of events occur: 1) the "X" icon appears. 2) the IE e runs across the bottom of the screen. 3) IE closes. At first thought, the "X" thing looks like a pop-up blocker icon. But steps 2 and 3 are pretty dramatic for a pop-up blocker. So then I noticed the icon bar that looks like there's a pop-up blocker enabled. He said that he's had that bar and blocker enabled for about a year and it's always worked beautifully and always in the background. So what the heck is it? __________________ Proud father of Priapus: the '04 Tideland BC9 with an OEM EV button and sense of self-righteousness >>Current Mileage<< Spreading information and passing gas in the Greater Chicagoland area

03-29-2005, 11:55 PM	#2
pjm877 Senior Member Join Date: Dec 2003 Location: austin, tx Posts: 223 My Car: 2004 Prius Package: Pioneer #3 Nominated 0 Times in 0 Posts TOTM Awards: 0 Friends: 0	Never seen anything like it.. few questions? Is he opening the same message? Or does this happen on every message? Best guess is if same message: The message has an Outlook Macro and it is trying to do something to "windows" Something is keeping this from happening??? Virus/worm scan the inbox/outlook. Does the Co use symantec corp antivirus?? Another thing to try is open mail box with something that could care less about anything to do with Outlook macro's and the such... I do not use Outlook for my mail handler for this reason.. too many e-mail worms out there... and work is a Lotus Notes env. One other thing to check is the symantec/MacFee data bases and see they have anything that looks like this discribed. Good luck. __________________ Perry (austin, tx..Just Drive it)

03-30-2005, 01:14 AM	#5
zielin Join Date: Dec 2004 Location: Playa Del Rey, CA Posts: 30 My Car: Package: Nominated 0 Times in 0 Posts TOTM Awards: 0 Friends: 0	Re: Need some Techie Assistance Here's what I would do to begin troubleshooting... 1) Make sure he has some sort of antivirus software installed (Norton is my favorite), and run a scan. 2) Check for spyware. There are several programs out there to do this. My favorite is a program called Spybot Search & Destroy. You can get it here http://www.safer-networking.org/en/download/index.html. 3) Go to the "Run..." command on your start menu and type in msconfig. When the System Configuration Utility window pops up select the startup tab. The list displayed is a list of all the programs that start up with your computer. Uncheck anything that is not vital. You can usually guess at what a file is for based on the path and file name. If you're unsure about a file try googling for it and see what turns up. So once you have a minimum set of applications restart your computer and see if the problem goes away. If it does, then you know that one of the apps you disabled is most likely the problem. So start enabling the apps again one by one until the problem comes back. When it shows up again, you'll know what the culprit is. Also, if you suspect that it might be the popup blocker then just try disabling the popup blocker first and see if it goes away. __________________ 2005 Tideland Pearl Coastal ETech EV Mod Coastal ETech Mudflaps Body Side Mouldings ExactMats Package 2 w/ Cargo Mat

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Emergency Assistance Kit	Claw	Prius Main Forum	7	07-29-2007 03:31 AM
Roadside assistance	gk4n6guy	Care, Maintenance and Troubleshooting	4	10-06-2006 10:43 AM
Challenge for a techie	mike0422	Prius Main Forum	6	05-06-2006 03:06 PM
Techie Recomendations	DaveinOlyWA	Fred's House of Pancakes	0	03-25-2006 12:40 PM
Roadside assistance	kevinhnc	Prius Main Forum	11	04-08-2004 02:14 PM

03-30-2005, 12:40 AM	#3
Tideland Prius Super Moderator Join Date: Oct 2004 Location: Canada Posts: 13,909 My Car: 2005 Prius Package: B Nominated 0 Times in 0 Posts TOTM Awards: 0 Friends: 11	I would lean towards the possibility of a virus especially if that only occurs when a particular message is highlighted

03-30-2005, 12:52 AM	#4
DaveinOlyWA Opps !! I Did it Again!! Join Date: Apr 2004 Location: South Puget Sound, WA Posts: 9,661 My Car: 2006 Prius Package: #4 Nominated 0 Times in 0 Posts TOTM Awards: 0 Friends: 5	kinda looks like an external message that isnt available as a preview. these are almost always spam and one of the prime ways to spread spyware. another thing could be the fact that he is accessing work email. could it be a conflict with permissions with viewing external images remotely? does it happen on all messages or just some of them?

03-30-2005, 09:37 AM	#6
TonyPSchaefer Ruler of Omicron Persei 8 Join Date: May 2004 Location: Far-North Chicagoland Posts: 8,413 My Car: 2004 Prius Package: #9 Nominated 4 Times in 2 Posts TOTM Awards: 0 Friends: 16	Thanks, guys. Let's see if I can answer a few questions correctly, based on the information he gave me last night. Is he opening the same message? Or does this happen on every message? This point never came up, but I'm guessing that he would have tried several messages rather than the some one over and over. I'm reminded of Frued's definition of insanity. Make sure he has some sort of antivirus software installed (Norton is my favorite), and run a scan. He has Norton installed at home and knows that it automatically updates regularly. I can't speak for the last time he did a full-out system scan. Check for spyware. I sent him links for "ToniArts Easy Cleaner", "Search and Destroy", and "HiJack This!". That was late last night and I doubt he's used them yet. The list displayed is a list of all the programs that start up with your computer. Easy Cleaner has a similar function. Additional Information: He recently (not sure how recently) installed the M$ Antivirus Software and he does the M$ Updates when available. I think he has SP2 installed.