SOLUTION #1:
Go to the following site and download the Opaserv.D pqremove utility (top of the list) that will automatically clean it up for you!
(they will ask if you are a current user, just select the link for "I'm not a current user" and fill out the information, don't worry, it's safe to share this info with these people) and once you've downloaded it, run it and let it do its work! Poof the virus is gone!
http://www.pandasoftware.com/download/utilities/
SOLUTION #2:
NOTE:Opaserv.Dcreates the following file(s):
1) SCRSVR.EXE, in the Windows directory.
2) TMP.INI, in the root directory of the hard disk. This is a copy of the system's WIN.INI file, with the following modification: Run=c:\windows\system\srcsvr.exe.
Opaserv.D also enters the line run=c:\tmp.ini in the original WIN.INI file, which causes the worm to run.
Opaserv.D inserts the following entry in the Registry:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\ CurrentVersion\Run\"ScrSvr" = %WinDir%\ SCRSVR.EXE
(HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ScrSvr =C:\WINDOWS\ScrSvr.exe)
The following three non-viral files MAY be found in the root folder of infected systems and must be deleted (if they exist): tmp.ini, scrsin.dat, scrsout.dat
Editing win.ini
At the taskbar, click Start|Run. Search for Win.ini in the Windows folder and open it in Notepad. Search for any references to the files you deleted. Delete the references.
Editing the registry
You will also need todelete the following registry key.
At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.
Locate the HKEY_LOCAL_MACHINE key:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ScrSvr = C:\WINDOWS\ScrSvr.exe
and delete it if it exists.
Reboot...
