annoying yellow triangle spyware

[mephistophyles]

Hey all,
I was hoping you could help me with a problem. I have an infected computer that has Spybot, Windows Defender, Windows Live One-care, Ad-aware and Panda Titanium 2006 all up to date and running. They find the occaisional piece of spyware that I clean, but I have something on here that it doesn't seem to identify. It manifests itself as a small yellow triangle with a black exclamation mark in it, found in the notification area next to the clock. I tried hiding the update, but it keeps coming back. Ever 20 seconds or so is pops up in a balloon with various messages telling me my antispyware software isn't up to date and that I should click in the corner to download the update. It calls itself system protection center or spyware protection center but so far I haven't been able to find it with any of the afore mentioned programs. Any help would be greatly appreciated.

PS how do I get spybot resident to stop popping up with a message about denying a registry change? It pops up with the same one every 15 seconds or so.

thanks a ton,
Phil

[Blues]

I have seen this thing before been a while check running processes to get a file name and try HiJack This and give us a log.

[bratt_0103]

This is the same virus I mentioned in the thread before this one. I have a log posted there. Any help would be appreciated.

[Bryce W]

Bratt_0103, I helped you with your problem in the other thread (http://www.technibble.com/forums/showthread.php?t=520). mephistophyles, if you are getting the same problem as Bratt try going though what I mentioned in the other thread. Otherwise let me know and I'll help you out personally.

[Apulse]

scit.exe is one of the many names that causes the little yellow triangle with the black exclamation mark to pop up warnings.

It is more annoying than dangerous (that i know of) but it is usually installed from phony software(e.g an activeX add on etc.) so is not picked up by virus scans or ad scans as a virus.

Quote:
"I found on my own that this hijacker program installs to your Program Files (usually on C:\) a folder called Netproject - here is where all the troublesome files are.

To delete, boot in Safe mode (F8 key on restart) then navigate to C:\Program Files\Netproject and delete the entire Netproject folder. Restart. Done."

[JRDtechnet]

Follow These directions exactly:

1. Download and run SuperAntiSpyware Free http://www.superantispyware.com/superantispywarefreevspro.html
Remember to update first and runa COMPLETE scan not quick. Remove all the items it finds.

2. Download Hijackthis scan and save log, post the result in this thread
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis

3. Finally Download and run Security Task Manager http://www.neuber.com/taskmanager/ it will show all the processes running on your computer it should default sort to highest rating, the more red the more dangerous the file, but there are some false positives so dont go deleting anything yet!! Since you cant really export the results and post them, take a screen shot and post the image here.

After you do that I'll tell you what you need to do next.