yup I agree, is NOT infected.

run over to
jotti.org and test it yourself essbebe :)

@essbebe: I have checked the file myself with several AV programs and it is not infected. I believe you are getting a false positive because the nature of the program is to alter the system in such a way as to hide a system icon.

You don’t have to take my word for it though, here is the source code of the file:

************************************************************

.386
.model flat, stdcall
option casemap :none

include ..\include\windows.inc
include ..\include\user32.inc
include ..\include\kernel32.inc
include ..\include\shell32.inc

includelib ..\lib\kernel32.lib
includelib ..\lib\user32.lib
includelib ..\lib\shell32.lib

main PROTO

.data
sClass db “SystemTray_Main”,0

.code

start:
invoke main

main proc

LOCAL data :NOTIFYICONDATA

invoke FindWindow, ADDR sClass, NULL
cmp eax, 0
je notfound
push eax
invoke RtlZeroMemory, ADDR data, sizeof NOTIFYICONDATA
mov data.cbSize, sizeof NOTIFYICONDATA
pop eax
mov data.hwnd, eax
mov data.uID, 1226
invoke Shell_NotifyIcon, NIM_DELETE, ADDR data
ret

notfound:
invoke ExitProcess, 0
ret

main endp

end start

*********************************************************

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://blog.ryantadams.com/wp-content/uploads/hidesrhi.exe
Information: Is the TR/Agent.56197.A Trojan

Generated by AntiVir WebGuard 8.0.15.0, AVE 8.2.0.100, VDF 7.1.2.127

@Jeannie: I too have had that happen. It occurs when the program attempts to remove the icon before Windows has finished loading the taskbar. In my case, it only happens once every 50 boots or so.

You could disable the startup item for hidesrhi.exe and instead use Windows task scheduler to run the program 15 seconds after you login.

was so excited to find this, installed, after next reboot, got taskbar not found.

??
XP Pro machine, much thanks!