notification area (aka system tray)

[Guest]

Picked up a nasty ad/malware somehow. I have (I think) eliminated all traces
of it except for an icon in the Notification Area which causes a Balloon Tip
every five minutes or so "Critical System Error. Click here blah blah blah".
It may be associated with Virus Blast. msconfig > Startup and other
attempts to remove this icon have failed. Short of turning off Ballon Tips
(which I like) what other process might I try to eliminate this icon?

Many thanks in advance

Mark

 

[Rock]

Picked up a nasty ad/malware somehow. I have (I think) eliminated all
traces
of it except for an icon in the Notification Area which causes a Balloon
Tip
every five minutes or so "Critical System Error. Click here blah blah
blah".
It may be associated with Virus Blast. msconfig > Startup and other
attempts to remove this icon have failed. Short of turning off Ballon
Tips
(which I like) what other process might I try to eliminate this icon?

Many thanks in advance

Mark

Have you checked the Run keys in the registry?

 

[Guest]

Yes, but no discernable reference to the nasty bug could be found. But I
will check again.

In addition, choosing "Always Hide" from the Customize Notifications button
of the Taskbar and Start Menu Properties fails to discourage it.

 

[Guest]

**update**

I found one more camoflaged reference in Registry. Seems to have stopped
the Balloon Tips but the icon still cannot be bannished from the sys tray. I
suppose that is success I can live with but if someone has additional advice
as to haow to eliminate icon it would be greatly appreciated. List of
references so far in Reg were: VirusBlast, VirusBurst & VB. Google turns up
only references to Blaster Worm and littel on these two bugs.

Thanks

 

[Rock]

**update**

I found one more camoflaged reference in Registry. Seems to have stopped
the Balloon Tips but the icon still cannot be bannished from the sys tray.
I
suppose that is success I can live with but if someone has additional
advice
as to haow to eliminate icon it would be greatly appreciated. List of
references so far in Reg were: VirusBlast, VirusBurst & VB. Google turns
up
only references to Blaster Worm and littel on these two bugs.

Thanks

<snip>

Run the latest release of Hijack This and post the log to one of the
specialty forums for it, not this one.

HijackThis
http://www.majorgeeks.com/download.php?det=3155

Forums to Interpret HijackThis Logs:

http://www.spywareinfo.com/forums/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/

 

[Guest]

Thanks Rock. Was aware of Hijack This but too lazy to jump on the learning
curve until now. Suppose now is as good a time as any.

Mark

 

[robinratcliffe]

Hi Mark,

I had the same problem it was down to a dll file in windows\system32.
The file I think is called oqabf.dll or something very similar. You
cannot delete the file as it is in use but there is an option in hijack
this to delete it next time the system reboots.

I'm sure this will fix your problem...


Rob

 

[robinratcliffe]

Hi Mark,

I had the same problem it was down to a dll file in windows\system32.
The file I think is called oqabf.dll or something very similar. You
cannot delete the file as it is in use but there is an option in hijack
this to delete it next time the system reboots.

I'm sure this will fix your problem...


Rob