Welcome to Vista Banter. You are currently viewing our boards as a guest which gives you limited access to view most discussions, articles and access our other FREE features. By joining our free community you will have access to ask questions and reply to others posts, upload your own photos and access many other special features. Registration is fast, simple and absolutely free so please, join our community today! If you have any problems with the registration process or your account login, please contact contact support. |
|
Security and Windows Vista A forum for discussion on security issues with Windows Vista. (microsoft.public.windows.vista.security) |
|
|
LinkBack | Thread Tools | Display Modes |
|
|||
'Windows Monitor' spyware??
I get this monitor window too. I joined this site just to add to this posting. I've searched with google and this is the only reference i could find for this issue. It's a small window that appears by itself when using IE7 on Vista. I followed your instructions above and here's what i came up with: Image name: iexplore.exe command line: c:\program files\internet explorer\iexplore.exe. I have a screen capture of the processes tab in task manager showing all processes running at the time but cant attach it here (getting an error). Sorry, I'm new to this site. but i can send it in e-mail if you want to see it. Thanks! Walt -- WaltInCa |
|
|||
'Windows Monitor' spyware??
That's the thing, I don't know which one of those on the list is the problem
because none are saying 'Windows Monitor' on it. "Jesper" wrote: Yes, please tell us the exact command line for the executable that spawned that window. --- Your question may already be answered in Windows Vista Security: http://www.amazon.com/gp/product/047...otectyourwi-20 "MC10" wrote: Just now getting a chance to do this. Ok I did everything upto locating the window that I'm concerned about. There is nothing in there that says 'Windows Monitor'. BTW right before I came to this site it came up again, then disappeared. Is there something else I should be looking for in there? "Jesper" wrote: OK. In that case, I'm going to give you a better way to troubleshoot this: 1. Go to http://www.microsoft.com/technet/sys...sExplorer.mspx and download Process Explorer. 2. Extract Process Explorer by right-clicking on the zip file and selecting "Extract all" 3. Open the folder you extracted it into and run procexp.exe. It will likely ask you whether you want to do this. 4. Right-click anywhere in the column headings, for example, on the one that says "Process" 5. Select "Select columns..." 6. Check the boxes for "Window Title" 7. In the Window Title column, locate the window that you are concerned about. 8. Right-click it and select "Properties" 9. Select everything in the "Command line:" text box 10. Hit CTRL+C 11. Respond to this message and hit CTRL+V to paste the command line in. It is a far easier thing to do but relies on another piece of software, which is why I tried solving it with the built in tools to start out. --- Your question may already be answered in Windows Vista Security: http://www.amazon.com/gp/product/047...otectyourwi-20 "Jesper" wrote: Yeah. :-) That was the part about going to the Applications tab first, finding the window, right-clicking on it and selecting "go to process." That will take you to the process that represents that window. --- Your question may already be answered in Windows Vista Security: http://www.amazon.com/gp/product/047...otectyourwi-20 "MC10" wrote: Ok got it. But what command line do you want me to copy down? There is a list of about 22 processes on there. Is there a way to copy and paste them? Or is there a certain one I'm looking for? "Jesper" wrote: Those "things with boxes in front of them" are the columns that you display in the main window. The fourth one from the bottom should say "Command Line". It tells us exactly what command was executed to create that window. Make sure it is checked. That gives you a column in the main window that says "Command Line". The information I need is in there. --- Your question may already be answered in Windows Vista Security: http://www.amazon.com/gp/product/047...otectyourwi-20 "MC10" wrote: I got to the process tab, select columns, but there is no command line column. It's just a list of things with boxes in front of the item, some are checked marked and some aren't. "Jesper" wrote: This could be any one of about a thousand things. Can you do this for us: 1. Hit CTRL+SHIFT+ESC 2. Find the window on the Applications tab 3. Right-click it and select Go to process 4. Hit "View|Select columns" and make sure the Command Line column is showing 5. Copy down the entire text in the command line column and reply to this post with it. With that we should have a far better idea. Many management tools have a "Windows monitor" but there may be malware that does too. --- Your question may already be answered in Windows Vista Security: http://www.amazon.com/gp/product/047...otectyourwi-20 "MC10" wrote: I have Windows Vista. Every now and then a very small window will pop up and it says 'Windows Monitor' on the top. If I try and click on it, it will go to the task bar and I can't bring it back up. If I roll my mouse on it, it will show what's on the screen, but the screen is blank. Is this Spyware? I did spyware and virus scans and nothing shows up, it is still coming up every now and then. Does anyone know what this can be? |
|
|||
'Windows Monitor' spyware??
If this is IE related it is probably an add-in. Can you please do this:
1. Open IE and make sure the window is there 2. Click the Tools drop down in the top right corner 3. Select "Manage add-ons...|Enable or disable Add-ons" 4. Copy down all the add-ons that are currently loaded and enabled. It may not show there, and if it does not, honestly, I think you need to call in for support so someone can do active troubleshooting on this. It seems likely to be a security issue, so you can call (866) PC-Safety (assuming you are in the US or Canada). --- Your question may already be answered in Windows Vista Security: http://www.amazon.com/gp/product/047...otectyourwi-20 "WaltInCa" wrote: I get this monitor window too. I joined this site just to add to this posting. I've searched with google and this is the only reference i could find for this issue. It's a small window that appears by itself when using IE7 on Vista. I followed your instructions above and here's what i came up with: Image name: iexplore.exe command line: c:\program files\internet explorer\iexplore.exe. I have a screen capture of the processes tab in task manager showing all processes running at the time but cant attach it here (getting an error). Sorry, I'm new to this site. but i can send it in e-mail if you want to see it. Thanks! Walt -- WaltInCa |
|
|||
'Windows Monitor' spyware??
OK, I will have to wait for the window to appear. It appears infrequently for me. I spent the last several minutes flipping through internet links to see if the window would appear. It did not. I can screen capture what add-ons are loaded in my IE session...what's the best way to get that screen shot to you? -- WaltInCa |
|
|||
'Windows Monitor' spyware??
I'm not really sure I need a screenshot. It would be far more useful to know
what executable spawned the window. --- Your question may already be answered in Windows Vista Security: http://www.amazon.com/gp/product/047...otectyourwi-20 "WaltInCa" wrote: OK, I will have to wait for the window to appear. It appears infrequently for me. I spent the last several minutes flipping through internet links to see if the window would appear. It did not. I can screen capture what add-ons are loaded in my IE session...what's the best way to get that screen shot to you? -- WaltInCa |
|
|||
'Windows Monitor' spyware??
First of all... this is all over google.
Try looking for some of the file names listed below on your hard drive and proceed with what you find.. Possible programs: (Notice the trend here... they are all trojans/worms.) Windows Monitor Trojan description with removal instructions: http://www.boredguru.com/modules/new...d=678&forum=24 WIN-SPY WINDOWS MONITOR 9.0 download Win-Spy is a complete, Local and Remote PC, Monitoring utility that secretly captures anything the user sees or types on the keyboard. Win-Spy operates in stealth mode, users are unaware of its existence. Win-Spy also includes, Remote Deployment, Webcam, Folder Hider ect. arsetup.exe SPAZBOX.A Trojan winmonitor.exe RBOT-XX Worm winmon.exe SDBOT Worm Windows Monitor should not be running at startup. It is likely a virus, spyware, trojan, or some other sort of malicious program. Use a virus scanner, and/or spyware removal tool to remove it. W32.Renama.A@mm Removal instructions. http://www.symantec.com/security_res...031-99&tabid=3 "MC10" wrote in message ... I have Windows Vista. Every now and then a very small window will pop up and it says 'Windows Monitor' on the top. If I try and click on it, it will go to the task bar and I can't bring it back up. If I roll my mouse on it, it will show what's on the screen, but the screen is blank. Is this Spyware? I did spyware and virus scans and nothing shows up, it is still coming up every now and then. Does anyone know what this can be? |
|
Thread Tools | |
Display Modes | |
|
|