Discussion Locked

w32.opaserv.worm

0 helpful
9 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a client who's computer continues to get reinfected with the w32.opaserv.worm even though all of the latest microsoft security patches and norton updates are applied. I have placed a password on the shares as well. The customer dials up to erols via modem. Please help, thanks

9 replies

by joseph moore

Opaserv can travel over network shares, so your client could just be getting infected again over the Internet.
I would either a)disable NetBIOS over TCP/IP or b)install a software firewall on the client's system.
Personally, I use ZoneAlarm on mylaptop, and I only connect to the Internet on it with a dial-up connection. YOu would be surprised at how many inbound connection attempts it blocks. For example, I was online Saturday afternoon, and ZA blocked 34 different connection attempts!

hope this helps

by bohicam1

Please go to the following site....http://tinyurl.com/1pwu
and read it carefully. You must disable ALL shares, this includes your hidden shares...ie...C$,D$ etc...
The link above is the norton site for this worm.
Good luck!

Mike

by rcom

As mentioned get the removal tool from Symantec and make sure to follow the instructions. Also if ME or XP make sure to read section on the restore folder. Also the tool can be ran from a floppy disk. Make sure to write protect the disk.

If you're being reinfected it's probably coming over the network. Also there may be a file that's seeking out the virus everytime the internet is connected. Get adaware.
Disconnect each computer from the network, and then scan with NAV using the latest virus definitions.
Run the removal tool on each computer to correct all of the changes made by the worm.
Do another complete scan on each system before reconnecting the network.

This discussion is closed to new replies.