What in the WORLD is this??

open the bar up and see which icons are on it

so right click bar, on the dialog look up customize and it will show you text and icons of icons on bar

remember, don't right click on the icon, but on the toolbar itself..select properties...on that dialog it will show you text and icons of icons on bar

Run msconfig and examine the startup tab - uncheck any unnecessary programs and reboot.  You may have to go through these one at a time until you identify the offending app.

Oh...thought he wanted to find out what it was first...so that he could research it and find out if its a valid program.  because if its malware, he probably should do more than just not start it.  should remove it entirely.  

silemone...it says <no title> next to it...

Right, I want to found out what it is..

And running msconfig and viewing the startup tab is an excellent way to do this!

then as jss said at least stop it from running...you may not find the name under msconfig either, but you can find the actual path of where its located.  if its in your system32, then most likely its a virus.  also, if its in your program files, but it's not one of the programs that are located under your programs list under the start tab, then that's most likely the culprit and again, its probably a virus...well more like a malware.  most people wouldn't expose their virus like such unless they're egomaniacs or its will be super hard to remove.

removed all unnecessary entries from startup (I am a tech guy so I am fairly familiar with this process)...still NO luck!

thought so...they wouldn't show it if it was that easy to get rid of it...only thing i could think to do was get the address to it and remove it through safemode

did you check with anyone else in your office to make sure they didn't add some new type of security ware?

No I did not...I wold rather figure this out myself.

understood...

any other ideas from anyone? any hints of what this might be?

problem is the icon has no name...

do you know what processes should be running and you could check your processes under
control alt delete, but then again, it could be attached to another process...if i think of something else, then i'll post it.  I'm intrigued now by this.

Hijack this log life...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:50:11 PM, on 8/4/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\TAMSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\LANDesk\Shared Files\residentagent.exe
C:\Program Files\Monsoon Multimedia\HAVA\Common\havasvc.exe
C:\Program Files\LANDesk\LDClient\LocalSch.EXE
C:\WINDOWS\system32\CBA\pds.exe
C:\Program Files\LANDesk\LDClient\tmcsvc.exe
C:\PROGRA~1\LANDesk\LDClient\collector.exe
C:\PROGRA~1\LANDesk\LDClient\issuser.exe
C:\Program Files\Citrix\PNAgent\ssonsvr.exe
C:\Program Files\LANDesk\LDClient\policy.client.invoker.exe
C:\PROGRA~1\LANDesk\LDClient\LDregwatch.exe
C:\Program Files\LANDesk\LDClient\antivirus\avservice.exe
c:\Program Files\Matrox Graphics Inc\PowerDesk\Services\Matrox.PowerDesk.Services.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\mgabg.exe
C:\TOSHIBA\IVP\ISM\pinger.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\Program Files\LANDesk\LDClient\softmon.exe
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\PROGRA~1\LANDesk\LDClient\rcgui.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\taskswitch.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\TrueSuite Access Manager\FpNotifier.exe
C:\Program Files\TrueSuite Access Manager\usbnotify.exe
C:\Program Files\TrueSuite Access Manager\PwdBank.exe
C:\Program Files\TrueSuite Access Manager\CssSvr.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\LANDesk\LDClient\antivirus\LDav.exe
C:\Program Files\Common Files\Bluebeam Software\Brewery\V45\Printer Support\BBPrint.exe
C:\WINDOWS\system32\00THotkey.exe
C:\Program Files\Toshiba\CrossMenu\CrossMenu.exe
C:\Program Files\Toshiba\TapButton\TapButt.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Orb Networks\Orb\bin\OrbTray.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://intranet
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://intranet
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Cheyne Capital Management
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [Matrox PowerDesk SE] "c:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.PowerDesk SE.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [FingerPrintNotifer] "C:\Program Files\TrueSuite Access Manager\FpNotifier.exe"
O4 - HKLM\..\Run: [UsbMonitor] "C:\Program Files\TrueSuite Access Manager\usbnotify.exe"
O4 - HKLM\..\Run: [PwdBank] "C:\Program Files\TrueSuite Access Manager\PwdBank.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [LANDesk Antivirus] "C:\Program Files\LANDesk\LDClient\antivirus\LDav.exe" /systray
O4 - HKLM\..\Run: [BbPrintMonitor] C:\Program Files\Common Files\Bluebeam Software\Brewery\V45\Printer Support\BBPrint.exe
O4 - HKLM\..\Run: [BbInstallUser] C:\Program Files\Bluebeam Software\Pushbutton PDF\Bluebeam Admin User.exe
O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\system32\00THotkey.exe
O4 - HKLM\..\Run: [CrossMenu] C:\Program Files\Toshiba\CrossMenu\CrossMenu.exe
O4 - HKLM\..\Run: [TapButt] C:\Program Files\Toshiba\TapButton\TapButt.exe
O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Orb Networks\Orb\bin\OrbTray.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Program Neighborhood Agent.lnk = C:\Program Files\Citrix\PNAgent\pnagent.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www-307.ibm.com
O15 - Trusted Zone: http://www-307.ibm.com (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
O20 - Winlogon Notify: ATFUS - C:\WINDOWS\system32\FpWinLogonNp.dll
O23 - Service: Authentec memory manager service (Authentec memory manager) - AuthenTec Inc. - C:\WINDOWS\system32\TAMSvr.exe
O23 - Service: LANDesk(R) Management Agent (CBA8) - LANDesk Software, Ltd. - C:\Program Files\LANDesk\Shared Files\residentagent.exe
O23 - Service: Fingerprint Server (FingerprintServer) - AuthenTec,Inc - C:\WINDOWS\system32\FpLogonServ.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HAVA Service (havasvc) - Monsoon Multimedia Inc. - C:\Program Files\Monsoon Multimedia\HAVA\Common\havasvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Intel Local Scheduler Service - LANDesk Software, Ltd. - C:\Program Files\LANDesk\LDClient\LocalSch.EXE
O23 - Service: Intel PDS - LANDesk Software Ltd. - C:\WINDOWS\system32\CBA\pds.exe
O23 - Service: LANDesk Targeted Multicast (Intel Targeted Multicast) - LANDesk Software, Ltd. - C:\Program Files\LANDesk\LDClient\tmcsvc.exe
O23 - Service: LANDesk Remote Control Service (ISSUSER) - LANDesk Software, Ltd. - C:\PROGRA~1\LANDesk\LDClient\issuser.exe
O23 - Service: LANDesk Policy Invoker - LANDesk Software, Ltd. - C:\Program Files\LANDesk\LDClient\policy.client.invoker.exe
O23 - Service: LANDesk(R) Antivirus (LDAVService) - LANDesk Software, Ltd. - C:\Program Files\LANDesk\LDClient\antivirus\avservice.exe
O23 - Service: Matrox Centering Service - Matrox Graphics Inc. - c:\Program Files\Matrox Graphics Inc\PowerDesk\Services\Matrox.PowerDesk.Services.exe
O23 - Service: MGABGEXE - Matrox Graphics Inc. - C:\WINDOWS\system32\mgabg.exe
O23 - Service: pinger - Unknown owner - C:\TOSHIBA\IVP\ISM\pinger.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: LANDesk(R) Software Monitoring Service (Softmon) - LANDesk Software, Ltd. - C:\Program Files\LANDesk\LDClient\softmon.exe
O23 - Service: Swupdtmr - Unknown owner - c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 13243 bytes
*links edited out by rpgamergirl, Zone Advisor*
08/05/2008  

Umm....how do I edit a post? There are a few secure links that accidently posted

Request EE support to remove those link.

Ok, but it is ridiculous that I cannot edit my OWN posts...what could possibly eb the reason for this?

That answer should be from EE admin :o)

It's probably some type of spyware if it isn't on any of the other computers on the network. Run adaware:
http://www.download.com/Ad-Aware-2008/3000-8022_4-10045910.html
Also try using SmitFraudFix
http://siri.geekstogo.com/SmitfraudFix.exe
and ComboFix
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Run everything in safe mode and disable system restore before restarting in safe mode.
If that icon doesn't go away post again.

Or maybe you can try something like:
http://www.pssoftlab.com/pstf_info.phtml
to figure out what it is.

Can someone PLEASE get an EE admin to remove those links?? it has been HOURS now...shouldnt take tis long

tried booting in safemode to check if its there too?

Yes I did and it isnt there, but then again most of the regular icons int he taskbar dont show up in safe mode taskbar either

So frustrated!!

if its not there, then try this

start>run>msconfig>Services
tick Hide All Microsoft Services and click on Disable All
then in Startup tab, click Disable All

apply and restart
is it still there?

He is a tech guy!  He would have already done this ! :)

Did that for all of startup but not services...everything in there is recognizable

i couldn't guess if he did this or not.....he said he removed unnecessary items only.

Just for identification purposes, you might want to try this command line utility:

http://exodusdev.com/sites/default/files/SysTrayScanCmd_092b.zip

It's a beta version, but it seems to work well, giving you a list of the programs associated with tray icons.  Here is the page where I found it, in case you want to read about it:

http://exodusdev.com/products/windows-system-tray-scan-utility

:)

This is a good utility...but as soon as I run it it brings up a command prompt and dissapears a second later...so I cant see anything

I figured it out....this is what it reports....I bolded the one which seems suspicious

SysTrayScan version 0.0.9.2 (BETA)
Exodus Development http://exodusdev.com
Please report any problems to exodusdev@gmail.com

PID Path Visible Hidden
------- ------------------------------------------------ ----- ------
4048 C:\Program Files\Microsoft Office\OFFICE11\OUTLOO 2 0
K.EXE

3348 C:\WINDOWS\Explorer.EXE 1 4
0 Unknown 0 1
2776 C:\Program Files\LANDesk\LDClient\antivirus\LDav. 1 0
exe

3052 C:\Program Files\Toshiba\CrossMenu\CrossMenu.exe 1 0
2496 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 1 0
2100 C:\Program Files\TrueSuite Access Manager\FpNotif 0 1
ier.exe

1668 C:\WINDOWS\system32\igfxtray.exe 1 0
2904 C:\PROGRA~1\LANDesk\LDClient\rcgui.exe 0 1

Well...supposedly system idle process is PID 0...so back to square one

dealstrike:
I know you want to find out what this icon is before anything but you must realize that it's probably some sort of spyware/malware application and the longer you leave it on your system, the more infected it could become rendering your computer pretty much useless.
Run the spyware scans as I and others have posted. At least if they find out that it's spyware you'll get a list of names from the spyware scan logs.

I just ran hijack this (which I posted above) and adaware, as well as antivirus software......all came up with nothing

From reading the posts above, you said you haven't checked with anyone else at your office if they had the same icon. I would assume this is a company PC. If your company has it's own IT department or a partner they use, this may be monitoring software. They could have made their own software custom so that's why no one notices what it is. You're best bet is to check one of the other computers at the office and see if it's there. If it is, that's most likely your answer.

It doesn't seem like anyone else in the office has it....and I am the IT guy in this branch office...so maybe corporate is monitoring me only :)

LOL!
Well here's a nother list of programs that may help find out what that is.
http://technet.microsoft.com/en-us/sysinternals/cb56073f-62a3-4ed8-9dd6-40c84cb9e2f5.aspx
Autoruns and ProcessExplorer may be the best 2 of that list.
The cool thing about autoruns is that it show the icon of what's running next to the process. That may help out in this long journey....heh

did you try disabling the Services....there are losts of them out there
and this can be another reason why the icon doesn't have a program title next to it.

The patriot act is finally catching up to even us Computer Techs.  Or more than likely someone hijacked your computer with a very cleverly written worm.   Look for a trojan horse remover or worm remover. Or it may be true that your IT manager monitors all the techs.  The only reason I can see the icon being there at all is because someone doesn't mind that you know that it's there because you can't remove it which is the case.  Have you checked your registry for any software with strange names?  if you see them, look them up on the net and see if they are indeed for monitoring you or spyware.  I guess you've searched your computer for all hidden files especially .bat files.  most computers no longer use autoexec.bat, etc, but if you're using one, it's most likely because it has some startup commands in there that someone wants to run.  Finally, you could do two things:  Ghost window files to your computer and if its hidden there, it will be removed.

You know, I don't think that icon is malware.  I swear I've seen it somewhere before, but I can't think exactly where.

I see from the HJT log that this is a Toshiba, either laptop or tablet.  This could be a Toshiba hardware related utility.  Try changing things on the hardware, turning CapsLock, NumLock, and ScrollLock on and back off, enabling and disabling the touch pad by button, etc. and see if the icon changes.

:)

FINALLY! Someone that has seen it before! Try to remember! I will contact toshiba and see what they say, I dont think its malware either

Also, although I know you've tried right- and left-clicking, and probably hovering the mouse for a tooltip; have you tried double-clicking the icon?

This one's gonna drive me crazy; I hope we get it figured out soon!

:)

Yup, tried double click, left click, right click, hover over, use a drilling machine...nothing..

Did you use autoruns yet?

Well, I've been racking my brain, and going through your HJT log line by line, but nothing is ringing a bell.  I agree with bbrunning; the next step is to run the Autoruns program (I never noticed before that it showed icons; good call!) and post a screenshot or two of the results.

:)

Where do I see system tray icons in this list?

does it always show?
or only with paint?

Only with Paint? I dont get it....that was a screenshot that I took on the taskbar...and it is always there

I've attached some screenshots from Autoruns on my computer.

The sections you are interested in are the ones with the arrows in the first two screenshots (run & startup sections, and services).  You'll notice that at the beginning of each entry line, there is an icon.

If you select a particular item, as in screenshot 3, the details and icon will be shown in the bottom pane.

:)
autoruns1.JPG
autoruns2--services-.JPG
autoruns3--icon-.JPG

Nope, that icon in my taskbar is not ANYWHERE on those lists when I ran autoruns, weirder and wierder

Hmm, well, I guess you'll have to find it the hard way, since my tortured brain still can't come up with where I've seen that before.

Next step, I suppose, would be to go through the process list using Task Manager (or the third party tool of your choice) and kill processes one by one (avoiding the ones that you can't or shouldn't kill, or you're POSITIVE are not related to the icon).  After each process killed, move your mouse over the icon to see if it disappears; if it does, you just killed the process associated with it.
If this doesn't work, you can use the same procedure with services, stopping them one by one (except MS services & other known services as above), moving your mouse over the icon each time as above, until it disappears.

If you go through every possible process and every possible service, and still can't find the culprit, then we will be forced to conclude that I was mistaken, and that this is indeed malware of some type.

:)

I tried ending every single process and most services already and the damn thing never dissapears...and I still dont think its malware, stupid icon that has taken over my life

Well, I'm out of ideas....format the computer...heh

what I HAVE decided to do is set up another PC and log into it...and see if this icon automaticaly appears on that, then I know it will be user/profile specific for me only, and hence know they are monitoring me!

You may be right, it may be a monitoring program of some type; but it seems to me that a decent monitor program would take better measures to hide itself - i.e. no tray icon.

This may be a dumb question, but sometimes it's the simple things that escape us:  Have you gone through your Start Menu, and maybe Add/Remove Programs too, to see if any of the programs there have the same icon?  It's worth a quick look.

:)

You are right...while I did check program files and start menu I DID completely skip over add/remove programs...but unfortunately still nothing :(

Well, I'm baffled.  I'd say go ahead with your plan to set up and log into another PC.  That will tell you whether this is something that's being pushed to you via login script, GPO, etc.

If you don't see it on the new PC ... I guess you could try removing and reinstalling any Toshiba utility you can find an installer for.  I keep coming back in my head to the idea that this is hardware related, like some trivial piece of an audio suite, or a tablet button manager, or something like that.

:)

dealstrike: Hello! Been reading about your issue here and found it quite interesting--perplexing! :)

 Just to be clear...have you tried the following? (also see attached image):

1. Right-click taskbar and choose "Properties"
2. In the "Taskbar and Start Menu Properties" window, click "Customize..."
3. Now, in the "Customize Notifications" window, compare the icons next to items listed here with the mystery icon in your taskbar.

I thought that perhaps you already checked there based on the beginning posts, but just in case...
mysteryiconjpeg.jpg

Hello Nicholas....welcome! yes, I did try it before and here it is again...it is in the list but does not say what it is...and it seems like it is active
pic.JPG

maybe you shoould run a rootkit detector:
http://technet.microsoft.com/en-us/sysinternals/bb897445.aspx

Could it have been created with Power Pro? Custom menus, icons, and hotkeys. Check these links to see what I mean: http://osdir.com/ml/windows.power-pro.beginners/2004-07/msg00018.html

PowerPro
http://powerpro.webeddie.com/

Tekserver....if I could give you 5000 points (without losing my monthly alloted points), GOOD WORK

applause !

LOL, and I just worked on a toshiba tablet PC last month. Good job!

Thank you, thank you!  <takes bow>

This just goes to show that there are a few benefits to selective OCD.

I became obsessed with this question on a couple of occasions, especially after I became convinced I'd seen that icon before, and spent quite a bit of time trying to craft a Google query that would help.  (Fortunately I have a very understanding boss; otherwise he might have been perturbed by the work hours I spent on this!)
I'd nearly (but not quite) given up, and was on-site working on a customer's system, when I spotted the icon and nearly fell out of my chair.  It took three tries to right-click the icon so I could get a screen shot because my hand was shaking on the mouse.  Thankfully the customer wasn't in her office at that moment; I don't think she'd really have understood.

Anyway, I'm glad I could help.

If anyone here is ready for another challenge, I have an open question here:  https://www.experts-exchange.com/questions/23614644/Intermittent-server-console-unexpectedly-logs-off-at-about-3-am.html
feel free to come take a stab at it!

:)