Discussion Locked

How to remove W32/opaserv.worm Virus

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Is there anybody had expaerience of removing the said virus? I have been using Removal tool from Norton and scanning with McAfee 4.xx with new update. but still, the virus keep on displaying/ monitored by anit-vitus installed on the PC.

This virus keep on inffecting other PC via network. Too Bad.

Thanks you in advance for your reply and help.

5 replies

by gmatov

I've run the Opaserv killer a number of times. Kill Opaserv says found, removed, etc. I've edited win.ini, and removed the Run... and all's well till I reboot, then a dialogue box tells me cannot find opasrv.exe reffed in the .ini. Now when I run Kill Opaserv, it stops at a fault without cleaning. I've clipped the halt screen and am sending to Norton, but how the heck do I get it to stop coming up after a reboot? I do not find it in the registry, following norton's explicit directions on where to find and delete the run=. Is my machine reverting to the last saved registry backup. Big enough change to go back? What do I do? Delete all my old reg backups after cleaning, so that it can't revert?
Thanks
Does anyone know where everyone went when 32bit.com shut down. I liked their forums. Mostly very helpful, and easy to get along with. I always got an answer pretty quick, and pretty well to the point. I'll have to give this one more of a shot. I've been regged for quite a while, but didn't even know there was a discussion board.
Thanks again.
George

by matrix1000

I had the same problem with the opaserv worm in my network. I got tired of deleting it everyday in the same machines so I Unshared all shared directories and then ran the free version of Zone Alarm, then ran the cleaner tool. Seems to be working so far

by gmatov

I've got them all. Everytime I run Norton to Opaserv Killer, it hangs. DL'd it again, thinking it's not impossible that the file got corrupted somehow, same thing. Where the heck alevir.exe, and brazil.exe and brazil.pif came from, I do not know. I do know I installed ZA and don't recall brazil.pif before that. Now when I dial out, ZA tells me that brazil.pif is connecting to the internet. My modem activity, usually way more down than upstream has changed to tons of bits sent, mebbe 7 meg sent to 5-6 meg recieved. It's sending some kind of info to someone, and I don't know who. What have I installed lately that installs brazil.pif? I think ZA is the only thing I've installed on this, my second best computer, and only because I've been using this 1.2 Athlon for e-mail while I play with video files on my 1800. Cleansweep won't let me remove brazil because it's in use and wants me to shut it down first. Hell, if I could shut it down, I wouldn't need to cleansweep it. What'm I gonna do. My next ( Last? ) option will be to wipe the partition and start over, but I dual boot with Win2K and would have to install that again, too. No big deal, just a pain. This mach is just a play toy, anyhow.
Thanks for any help.
George

This discussion is closed to new replies.