Never seen that icon, but there are many questions on how to guess the icon on the site.
Here's how I would track it down where in your case, it's isolated to one specific user account.
- Log out all users
- Log in as a new user (without the icon) and dump the process table to /tmp `
- Repeat for the other user
- Compare the two files to see what is different.
I use Kaleidoscope/ksdiff, buy you can diff the files using other tools if you prefer:
ps -u `id -u` | cut -c 32- | sort | uniq > /tmp/user_ps_cleaned_`id -u`
So, if your user ids were 501 and 502, you could:
diff /tmp/user_ps_cleaned_*