How to remove rootkits and malware?

I have downloaded and ran the programme Rootkit Hunter and the results are worrying.
I don't know much about malware other than a malicious individual has persistently been installing it onto my machines via malicious emails - this time targeting my iPhone 4 (which I promptly got rid of upon discovering this individual's presence and replaced with a new Samsung S4, which is probably infected as well now) first; and from there using my house Wifi network to get onto my Macbook Pro 10.8.3 (which is the machine I am on now, and the machine the results refer to); and also my Samsung Galaxy Tab 10.1; and most likely the phones and computers belonging to other members of my family are compromised as well.
The following are the worrying results identified by Rootkit Hunter:
For "Checking LD_LIBRARY_PATH variable", it says in yellow "skipped".
For "Checking for hidden processes", it also says in yellow "skipped".
I also have red warning notices in relation to system configuration file checks and filesystem checks alerting me to the following:
"Checking if SSH protocol v1 in allowed The SSH configuration option 'Protocol' has not been set";
"Checking if syslog remote logging is allowed Syslog configuration file allows remote logging: install.* .0.1:32376"
"Checking /dev for suspicious file types Suspicious file types found in /dev: /dev/fd/6: MS Windows icon resource"
"Checking for hidden files and directories Hidden file found: /usr/share/man/man5/. rhosts.5: troff or preprocessor input text".
I do not know how to interpret these results other than of course realising they are alerting me to the fact that something is wrong and needs fixing.
I do not know exactly what Rootkit Hunter is telling me is wrong, and I do not know how to fix the problems it has identified.
I would greatly appreciate it if anybody could perhaps tell me how I can do these things. And any advice on which programmes to use for my Samsung machines and the best way to protect my devices in the future would also be greatly appreciated.

First, before I respond on specific points, I'd like you to take a look at my web site:
http://www.thesafemac.com
...just so you can see what qualifications I have for speaking about this topic. I'm not just blowing wind, as many folks on forums can do sometimes.
I was sent a dodgy email to the old iPhone 4 [...], and I clicked on it, had a quick look at it and quickly deleted it.[...] I did not know at the time that just opening them can open the door for malware to install itself onto given device
That is absolutely not true... at least, not using the Mail app on either a Mac or an iOS device. Opening an e-mail message does not do anything that could run unauthorized code on your machine, so there's absolutely no way that any kind of malware could have been installed just by opening and viewing an e-mail message. If you opened a malicious attachment, of course, that could infect your Mac with something, but only if it somehow managed to bypass all of the Mac's built-in security. On an iPhone, the only code allowed to run must be downloaded from the App Store, so it's not possible for any code attached to an e-mail message to run.
I reached over to phone and when I picked up I saw that it was asking me for my Wifi password. [...] I checked and it was Wifi was off, but when I tapped Wifi and opened it, underneath it was revealed that it was actually on - same with Bluetooth etc.
Sounds like a glitch with the phone. That's definitely not evidence of malware.
the person had half an hour to crack my parents' home 10 character Wifi network from the Iphone 4
If your wifi network actually got hacked (you don't say how you know that it was), it is probably mis-configured to allow remote administration with no password or with the router's default password. That definitely wouldn't be something they did via the iPhone.
The person even taunts me that they can see exactly what I am doing on them - they can see all my pictures; wallpapers; know what online radio stations that I listen to; read my emails; watch me playing video games; and know everything I type in my browser; and what I don't type as well via screenshots. I know this because they confirm to me.
There are a few possible explanations for that. One is that this person has gotten access to some online account of yours that gives them access to your machines. For example, if your Apple ID/iCloud account is hacked, depending on the settings on your computer and how you use iCloud, that person can see a lot of your data, locate all your devices and even potentially get access to your Mac via Back to My Mac.
If you use other remote access software, such as LogMeIn, that would explain the issue on all the machines. The LogMeIn account (or whatever other remote access account you have) has been compromised.
It's also possible that your hacker has somehow gotten access to your network such that he/she can see all the network traffic being sent and received. This could expose passwords and other sensitve information that could lead to gaining access to cloud-based data or accessing your computer via some remote access software that you have already installed.
Another possibility is that this person has a local accomplice who is able to get physical access to your machines, and who has installed remote access software of some kind. With physical access, a knowledgeable person can do a lot!
What is really not a likely possibility is for all these machines to be simultaneously and transparently infected with malware remotely. Each device would have to be infected with something completely different, through different means, and each of these pieces of malware would have to get past the protections running on each system. (To see more about what protection is built in on Mac OS X, see How does Mac OS X protect me?.)
I hear what you say about the iPhone, but I have been reading news articles online recently which actually claim it is the least secure phone.
I'm not sure what news site you were looking at... probably not a reputable one! Android has gotten a reputation for being the most insecure system on the planet, while iOS is known to all but a few biased detractors as being quite secure. Take a look here, for example:
http://thenextweb.com/google/2013/08/26/internal-us-government-memo-warns-author ities-about-android-malware-threats/
Fixing it so my devices aren't recognisable to snoopers on a network is also somewthing which I am interested in knowing how to do.
Well, the first order of business is to find out if this is all just a bunch of smoke-and-mirrors on the part of the person harassing you, or if they have actually gained access to something. If they have access, you need to find out what and how.
I'd advise changing passwords on ALL online accounts, resetting the wifi router to factory defaults and setting it up securely, and installing Little Snitch on your Mac. (Little Snitch is difficult to configure correctly, and will warn you about all kinds of normal processes. You will learn a lot about what your Mac connects to on a daily basis, and if there's actually any hacking going on, Little Snitch should catch it and prevent it.)
I'd also advise you to take a look at my Mac Malware Guide for more information on what kind of malware threats are out there, how your Mac protects you and what you need to do to stay safe.

Similar Messages

  • How to remove bullets and spacing for url links in the Related Links iview?

    I tried to look for a property that I can edit the look-n-feel of the url links in the Related Link iView using "Theme Editor".
    All I need is to remove the bullets and increase some vertical spacing between the links.
    Currently, it looks like this:
    URL iView A
    URL Iview B
    I go through the whole section of Related Links properties, none of them seems to do what I want.
    Here are the list of properties in Related Link section (of Navigation Panel):
    Link Color
    Text Decoration of Link
    Hover Color
    Text Decoration of Hovered Link
    Initially, I thought "Text Decoration of Link" should be the right property I should look at. But there are a drop-down with 5 options: None, Underline, Blinking, Overline and Line-Through, which really can't achieve what I want.
    Thanks for advice.
    Kent
    Post with Diagram Illustration:
    <a href="http://sapnetweaverforum.blogspot.com/2006/11/how-to-remove-bullets-and-spacing-for.html">How to remove bullets and spacing for url links in the Related Links iview?</a>
    Message was edited by: Kent C.

    Hi, Kai.
    I checked the Related iView properties (URL Template), I don't see what layoutset it is really using. I am not sure, is that a layout set apply to the Related Link Iview?
    For the regular KM iView, I will see what Layout Set I want to apply, then I can go and change the properties (of layout coontroller, collection renderer & resource renderer)you mentioned. But for this Related Link iView, I really don't know. I guess it may be in the code itself.
    If there is a layout set for Related Link iView (or the place to apply layout set to it), can you point to me which one is that? (I did a search through the layout set names, I only find the AppQuicklinkExplorer (I used this for Dynamic Nav. Link iView before), if I can aply this layout set to Related Link iView, my problem will be solved.)
    Thanks for help.
    Kent

  • Does anyone know how to remove pop up, malware and virus form OS X 10.9.5, there is a lot of pop up on my mac book air.

    Does any one know how to remove pop up and malware. There is a lot of pop up on my mac book air OSX 10.10

    Helpful Links Regarding Malware Problems
    If you are having an immediate problem with ads popping up see The Safe Mac » Adware Removal Guide and AdwareMedic.
    Open Safari, select Preferences from the Safari menu. Click on Extensions icon in the toolbar. Disable all Extensions. If this stops your problem, then re-enable them one by one until the problem returns. Now remove that extension as it is causing the problem.
    The following comes from user stevejobsfan0123. I have made minor changes to adapt to this presentation.
    Fix Some Browser Pop-ups That Take Over Safari.
    Common pop-ups include a message saying the government has seized your computer and you must pay to have it released (often called "Moneypak"), or a phony message saying that your computer has been infected, and you need to call a tech support number (sometimes claiming to be Apple) to get it resolved. First, understand that these pop-ups are not caused by a virus and your computer has not been affected. This "hijack" is limited to your web browser. Also understand that these messages are scams, so do not pay any money, call the listed number, or provide any personal information. This article will outline the solution to dismiss the pop-up.
    Quit Safari
    Usually, these pop-ups will not go away by either clicking "OK" or "Cancel." Furthermore, several menus in the menu bar may become disabled and show in gray, including the option to quit Safari. You will likely have to force quit Safari. To do this, press Command + option + esc, select Safari, and press Force Quit.
    Relaunch Safari
    If you relaunch Safari, the page will reopen. To prevent this from happening, hold down the 'Shift' key while opening Safari. This will prevent windows from the last time Safari was running from reopening.
    This will not work in all cases. The shift key must be held at the right time, and in some cases, even if done correctly, the window reappears. In these circumstances, after force quitting Safari, turn off Wi-Fi or disconnect Ethernet, depending on how you connect to the Internet. Then relaunch Safari normally. It will try to reload the malicious webpage, but without a connection, it won't be able to. Navigate away from that page by entering a different URL, i.e. www.apple.com, and trying to load it. Now you can reconnect to the Internet, and the page you entered will appear rather than the malicious one.
    An excellent link to read is Tom Reed's Mac Malware Guide.
    Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.
    See these Apple articles:
      Mac OS X Snow Leopard and malware detection
      OS X Lion- Protect your Mac from malware
      OS X Mountain Lion- Protect your Mac from malware
      OS X Mavericks- Protect your Mac from malware
      About file quarantine in OS X
    If you require anti-virus protection Thomas Reed recommends using ClamXAV. (Thank you to Thomas Reed for this recommendation.)
    From user Joe Bailey comes this equally useful advice:
    The facts are:
    1. There is no anti-malware software that can detect 100% of the malware out there.
    2. There is no anti-malware that can detect everything targeting the Mac.
    3. The very best way to prevent the most attacks is for you as the user to be aware that
         the most successful malware attacks rely on very sophisticated social engineering
         techniques preying on human avarice, ****, and fear.
    4. Internet popups saying the FBI, NSA, Microsoft, your ISP has detected malware on
        your computer is intended to entice you to install their malware thinking it is a
        protection against malware.
    5. Some of the anti-malware products on the market are worse than the malware
        from which they purport to protect you.
    6. Be cautious where you go on the internet.
    7. Only download anything from sites you know are safe.
    8. Avoid links you receive in email, always be suspicious even if you get something
        you think is from a friend, but you were not expecting.
    9. If there is any question in your mind, then assume it is malware.

  • How to remove folder and leaf icons from a tree

    Hi,
    I know how to remove when we have a mx component i.e.,
    <mx:Tree folderOpenIcon={null} ...../> similarly for
    closed and default leaf icon.
    But how do i achieve this from an action script like say i
    have,
    var tree:Tree = new Tree();
    tree.setFolderOpenIcon(null); ///is there something like this
    or any other alternative.
    Please advice.
    Thanks,
    Lucky

    the folderOpenIcon is a style so you have to set it with the
    setStyle method
    try:
    tree.setStyle("folderOpenIcon",null);

  • Partial installs - how to remove them and start afresh

    Hi,
    I'm in the middle of installing BOXI 31 on a 32 bit unix machine, distro Red Hat Ent 5.0.
    How do you uninstall the partially deployed BO install. Is there a script that removes what was installed. Or is it simply a case of Add/Remove Programs and then physically removing the files copied top the directories.
    I'm keen not to lock up any of the ports from previous installs thereby affecting the workings of the correctly installed version.
    Here's the error in more detail below.
    Thanks for taking the time to read this post.
    I've managed to partially install the software but got an error midway through of
    [error] Errcode 1: cp -r /home/o2mars/perl/* /home/o2mars//perl
    [error] [PostInstallScripts::WaitForCMS] CMS is not started, giving up.
    ~                                                                               
    I presume this is due to my hosts file
    # Do not remove the following line, or various programs
    # that require network functionality will fail.
    127.0.0.1               localhost.localdomain localhost
    ::1             localhost6.localdomain6 localhost6
    192.168.0.162   oxygen

    Hi Caroline,
    cheers for the reply.
    Impatient and went ahead and removed the the directories completely - bit rash but it worked OK.
    On reinstall still managed to get that error but the progress of the install as a whole didn't fall over as it did previously on about 55% of Total Progress. This time it reached about 90% then came back with the message of
    BO installed with Errors etc.
    I then ran the setupinit.sh, everything was OK then on login to CMC and InfoView.
    I asked around the traps here (my colleagues would have loads more experience with Unix than I) and the said don't worry about it once the perl dir was there since it seemed to be copying to itself.
    [o2mars@oxygen ~]$ du -hs perl
    67M     perl
    so not as big as you say.
    It is a bit of a worry I suppose I would have preferred a clean install entirely.
    So far only the Red Hat Ent 5.0 and BOXI 3.1 itself are the only programs loaded so it would have only been the partial installs that could have consumed those port resources (it happened on a previous install I did before Christmas)
    Thanks for your tips
    Cheers, Ed

  • How to remove Header and Footer from Flat File

    Hi,
    In a scenario , we are going to recieve a flat file which will contains header , footer and data. We have to have to load data in Oracle tables and remove header and footer.
    once the data load is complete , we have to delete flat file from source directory.
    Please help me in solving this issue.
    Thanks,
    Kamlesh

    You have a header parameter in the file datastore. You can provide any number to skip rows from top of the file. For footer you can create a filter in staging area.
    Filter coould be something like this.
    where source_alias.source_column not like '%FOOTER_OR_ANY_VALUE_AS_PER_YOUR_REQ'

  • How can I remove spyware and malware from my mac ?

    How can I remove rootkit.spyware and Trojan.malware from my mac ?
    Since a few days, some webpages open by themselves and it look like the security of my computer is compromised.
    I have a Mac OS X 10.9.5
    Thanks for your help !

    Remove Browser Pop-up Problems
         AdwareMedic
         Adblock Plus 1.8.9
         remove adware that displays pop-up ads and graphics on your Mac

  • How to remove Farmville and Pokki on HP PC - Windows 8.1

    Purchased a new HP Pavilion 500-309 from Staples. HP deskop included Windows 8.1 - which was setup and automatically patched when I started the PC. I have not installed any other software on the PC - I'm only using the default Windows provided by HP. Everytime I logged onto the PC - I get reminders about Farmville updates. Why does HP install Farmville and some program called Pokki on their default Windows installation? I have not been able to uninstall Farmville and Pokki from the PC. How do I remove it?   Why would HP include crapware on a their PC that can't be removed? Side-note: Please stop pre-installing half-baked software on your PC.  This maybe the last time I purchase an HP PC.  I would expect that PC just came with Windows 8.1.  It does not say anywhere on the box, documentation or online that other software will be installed.   Instead of a clean install of Windows 8.1, I now have a PC with junk software.

    I too am very disappointed with HP pre-installing crapware Pokki. Not only does it constantly try to upsell software it actively HIJACKED MY BROWSER. Worse still, it HIJACKED MY CHILDREN'S BROWSERs and they are on non-admin accounts monitored by Family Safety. It seems that at least once a month, Pokki does an "update" which is really an upsell in disguise. It pre-ticks a box to get fake consent for an install of additional software or OS config changes. The worst one so far was the "HOMEPAGE-WEB" browser hijacker. I had locked my daughter's accounts to Google Safe Search to protect them, and yet Pokki saw fit to override this and change their browser search engines to an unsafe commercial service with no content filtering.  Also, it is not installed in a conventional manner, it is installed separately into the Default User profile, so that a conventional Uninstall does not work. This is awful malware-like activity and you should be ashamed of pre-installing it on your machines. Please provide an uninstall tool, as the true removal technique for this software is NOT covered in the link you provided from the vendor.  Also, you must take MORE RESPONSIBILITY for the crapware you pre-install, do NOT pass the buck, you installed this software.

  • How to remove mails (and attachments) permanently?

    Hi!
    I just realized my Archive.mbox (~/Library/Mail/V2/Mailboxes) is quite big (8.5GB) and I decided to remove old mails with large attachments.
    As I use GMail account via POP3, first I removed mails from the Google account and I freed up about 1.5GB extra space. Later, I searched for mails with attachments in Mail.app, then sorted then and started to remove and emptied the trash. This operation was quite weird as some of them where moved to the Trash folder, some not.
    As I was controlling the space of the Mailboxes folder this is what I noticed:
    - Archive.mbox - the size of the mbox didn't change (anyone know why?)
    - Deleted Messages.mbox increases while removing another mails then decreased while wiping it out (this is what I expected)
    In summary, I removed a lot of mails and didn't free up ANY space! Does anyone know how to do it properly?
    Also, while googling I found out about "Mail Downloads" folder which is moved from Library to ~/Library/Containers/com.apple.mail/Data/Library/Mail Downloads. As I set "Remove unedited downloads" to "When Mail Quits" can I simply remove all subdirs from this dictionary to save some space? This folder is only used for copy of attachments, right?
    Thanks for anwers,
    Bart

    Each IMAP account it's own Archive folder. POP accounts all share the same Archive folder.
    I removed a POP account in Mail but the archive messages did not delete. You would need to move them out of the Archive folder then trash to remove if you have archived other POP account messages. However, if it's only the one account, you can manually delete this folder in the User's Library then rebuild the Mail index.
    Quit Mail
    Go to the User's Library folder. This folder is hidden by default. To unhide: Select the Finder in the Dock. Under Go in the Menu bar > hold down the Option key and you’ll see the Library.
    Scroll to Mail folder.
    Mailboxes folder stores the "On My Mac" messages. IMAP accounts store it's Archive folder in the account's folder.
    In Mailboxes you'll find the Archive folder. Delete.
    In the MailData folder, delete the 3 files with envelope in the name.
    Open Mail and it will reindex your messages.
    Let me know if this helps.

  • How to remove music and movies from ipod touch 5

    Since recent update all music from itunes library has appeared on daughters ipot touch gen 5 and I cant get it off.  how do I remove it?

    you can only transfer itunes purchases from the ipod to the pc. to get any other music (etc.) from your ipod by using third party software (there are many threads on this, use the search box or try googling 'ipod to computer')
    you can also only delete 'Saved Photos' directly on the iPod. these are photos obtained on the iPod: by screenshot (press the sleep and home button at the same time), saving from email, or from safari (holding your finger on a picture while browsing the web will bring up an option to save it.
    any other photos will need to be deleted during the sync process (i.e. deleted from the folder which you sync your photos from)

  • How to remove iTunesHelper and keep player on desktop Windows 7(64bit) Home Premium, Service Pack 1?

    I use iTunes player only to purchase and store music and burn it to CDs.   
    I don't use iPod or any separate medium.  How can I remove iTunesHelper without disrupting the player?
    I'm having some trouble, and my Event Viewer shows these messages:
    Error: Application or service 'iTunesHelper' could not be shut down.
    Warning: Application 'C:\Program Files (x86)\iTunes\iTunesHelper.exe' (pid 1368) cannot be restarted - Application SID does not match Conductor SID..

    Hello kaytoe,
    Do you mean you receive the error message windowsUpdate_80240016" and "windows update_dt000" when you install the service pack 1?
    Can you normally install other Windows update?
    Please refer to the following article about Windows Update error 80240016.
    http://windows.microsoft.com/en-hk/windows7/windows-update-error-80240016
    1. Run the Windows Update Troubleshooter
    2. Run the command
     net stop wuauserv
     net start wuauserv
    Best regards,
    Fangzhou CHEN
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • How do remove Safari and MobileMe Mail completely????

    I have been having problems with both MobileMe email (I am not on iCloud haven ot upgraded to Lion),
    and Safari.
    I forward IMAP mail to MAIL from gmail. At one point mail would be sent from the WRONG email address,
        and it began sending what I had just sent back to my inbox as if I had checked to send me a copy - did NOT.
    I changed ALL of my email P/W 's and it is working okay so far, but don't trust it will continue. And can mail
    pprombles be connected to the Safari problems below? 
    ALSO...Safari is very slow, will freeze and close,  and need to be restarted - but here is a clue that I think
       it needs to come out:  occasionally when going from one page to another I will get artifact for a split second that is
        like many tiny (different sized) rectangular boxes in black and blue colors. Never saw my Mac do this before.
    Could these be due to an extension?  How do  you find the extentions for Safari adn remove them to see if that
        will help the problem?  I only added  AdBlock but according to Apple Ext.  it says I have Translate installed to
       read entired pages - which I don't recall installing at all.
    I am running Safari 5.1.9  on  MacOS 10.6.8 --- it was suggested I up Memory, etc., but I recently reformatter to
    decrease need.  However, is it possible that all the updates are too large for what I have now?  Is does not matter
    how much space I have (plenty of room) but what's in it now needs more processor and speed to run because the
    updates are less efficient?
      Model Name:          Mac Pro
      Model Identifier:          MacPro1,1
      Processor Name:          Dual-Core Intel Xeon
      Processor Speed:          2.66 GHz
      Number Of Processors:          2
      Total Number Of Cores:          4
      L2 Cache (per processor):          4 MB
      Memory:          1 GB
      Bus Speed:          1.33 GHz
      Boot ROM Version:          MP11.005C.B08
      SMC Version (system):          1.7f10
      Serial Number (system):          G8*******UQ2
    <Edited by Host>

    Hatter,  if I were upgrade for the new OS -  what all do I  need if I ordered it all to do myself at  home? Incl. the type of RAM, or anything else  needed please.  Thank you.  My understanding is that when I upgrade a computer the RAM must match  each other if I insert it a new one  - for example, if I have 1 GB,  I need to get another 1GB and not two 500 MB....etc.   Correct? 
    What about upgrading processors or ????  
    What do you know about the new Maverick?  Or is it too new.  Should I just get Lion?  and is it better to get the stand alone Lion OS,  as opposed to putting in the previous OS's and updating?  Will that save space?  Thanks.
    I am sooooo frustrated with this think bouncing back to freeze, crash and burn I am about ready to go back to PC if MAC is going to model them with a new OS every year.  Grrrrrrrrrrr.

  • How to remove Firefox and all its files?

    I've been primarily using Firefox 1.0 and mistakenly decided to upgrade to 1.5. Since then, it constantly locks up and won't work properly. As well, it keeps reverting back to the 1.0 version although I downloaded 1.5 and it worked initially.
    How can I just remove all versions of Firefox and start over?
    Thanks,
    Jeff

    Move the application to the trash. Empty the trash!
    You can also delete some files from the users' library Application Support folder.
    To find out where you have them, do a search in Spotlight (type Firefox, and wait just a little bit).
    Deivy

  • How to remove connect and workbook link after pressing Save as,Print,Export

    I have to remove the connect link and workbook link which appear AFTER pressing Save as,Printable Page,Export in a discoverer viewer report. I had already removed the link in the report itself with changing the uix files, but after pushing the link for export, save as or print the link Connect and Workbook still appear.
    I know that I have to change something in UIX Files, but which one and what I have to change...? Have anyone an idea? Thanx for fast reply, it´s a urgent problem.
    in addition: In metalink,otn and google were no solution...

    If the tone really is a single (or at least narrow band) frequency like the picture shows, I'd try the Notch Filter on the Audition/Effects/Filter and EQ menu.  It might take some playing around to get the exact frequency and tweak the amount of cut you apply vs. the effect it will have on surrounding frequencies--but if you can get the right balance, you can then easily apply this to the whole of every file.
    Sorry, can't help on the Premiere Pro question since I only use Audition.

  • How to remove Homegroup and Libraries icons from 7 RC desktop (after Vista upgrade)?

    I took the plunge and upgraded my Vista 64 to Win 7 RC. The upgrade process lasted over 6 hours (some 300GB on my C:drive with Vista), but, once completed, it has been working really very fast & smoothly. The original Vista system is backed up of course on an external HDD.
    What annoys me though, are 2 stubborn system icons on my 7RC desktop, Homegroup and Libraries. I don't use Homegroup and Libraries can be accessed via Taskbar or Start menu, so I want to get rid of these two icons, but they cannot be remove from the desktop as such, like "normal" icons.
    Personalize -> Change Desktop Icons doesn't seem to offer any solution for these 2 icons.
    I never had those desktop icons on earlier clean installs of Win7 Beta (on separate dual boot HDD), only now after the massive Vista->7RC upgrade.
    I also have retained an earlier "unofficial" other Win 7 7100 on another HDD (with less installed apps.), for comparison.
    Is there any registry hack or other method to remove these desktop icons?
    I'd be grateful for a solution.
    T.i.a.
    Uffe
    System specs: MB: Asus Rampage Formula, CPU: E8500 @ 4005 MHz, RAM: 4 GB Corsair 8500, GPU: Geforce 275 @ 715 MHz, Sound card: X-Fi Fatal1ty Extreme Gamer, HDD: 4 internal total 1.4 TB + 3 external for backups

    Windows7 Home Premium
    After hours of being annoyed........
    1. Homegroup Icon:
    open my computer, control panel, system and security, administrative tools, services, then scroll down to: homeGroup listener and homeGroup provider, disable both. close out, log off. the icon should be gone when you log back on.
    2. Libraries Icon: carefully.......please, if no experience in registry get help.
    go to: start, run, type in: regedit, select the HKEY_Local_Machine key, navigate down finding: Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace
    You will see several hexadecimal strings, select each one in turn, and the right pane will show you which icon is being selected. my library icon was the very first string and showed two lines on the right side of the page, first being: usersLibraries and the second being: remove message.
    when you find the appropriate library string, make a new folder in your my documents named: registry back up, then highlight the string on the left, go up to the top left of the registry page and click on, file then export. save the registry file in your new folder location. I also saved the two files on the right side of the page and named them what they were called on the page, so I would know what they were. (not sure I had to but did)
    After saving the registry files, next you can delete the string you have highlighted on the left which in turn, shows the name userLibraries (on the right side of the page).
    Poof it is finally Gone! available in your saved folder
    Hope this helps

Maybe you are looking for