Jump to content

Mysterious program in systray(red dot)


shapeless

Recommended Posts

So on my friends computer, there's this red dot in the systray. When you right-click it, a windows pops up prompting for a password, the title of the window is password for viewer.

Can't seem to find the name of the program. I can't see anything suspicious in task manager or in services. Is there some program that can give you the path of a window that pops up? That would end the mystery, but I'm not aware of a program like that.

Link to comment
Share on other sites


Is there some program that can give you the path of a window that pops up? That would end the mystery, but I'm not aware of a program like that.

Yes, Process Explorer can. There is a button in the buttonbar, representing a vizier, which you can drag to the window. Process Explorer will tell you which process owns the window.

Link to comment
Share on other sites

This thread suggests it's called "cheater checker viewer":

http://www.hardforum.com/showthread.php?p=1031533228

Cheater Checker site:

http://www.cheatercheckers.com/

This thread goes into detail about removing it:

http://mytgn.co.uk/forum/showthread.php?p=301940

PDF with removal details (I don't know if this covers the very latest version):

http://www.spywaresignatures.com/details/cheaterchecker.pdf

It might be obvious as to who installed it on your system, but be sure to make a record of file timestamps. Then search for files that were created/modified at the same time - maybe they also installed other similar programs or did something which will identify them.

If you can manage to find its config file, you might be able to read it - it has the ability to email logs, so that email address needs to be stored somewhere. Alternatively, leave it running and use a packet sniffer to log the whole email it sends.

It might be best to completely reformat - if the red dot is Cheater Checker you really can't trust your system to be completely free of other similar or worse programs. You should also check the back of your computer to see if there are any hardware keyloggers inbetween the keyboard and PC.

If the presence of Cheater Checker is confirmed, you must also change ALL your passwords - ones that you have actually used since CC was installed, accounts that have the same password, and anything IE or Firefox has saved. You should also change passwords to accounts associated with your email account, since some sites send you your password when requested.

(edit: replace "you"/"your" with "him"/"his")

Edited by SmaugyGrrr
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...