Opaserv again with new file name

Using this forum, I thought I had finally gotten rid of the opaserv virus (scrsvr.exe).

Now its back using a file name of brasil.pif

Any help or ideas would be appreciated.

flog, It seems like it's a b***h to get rid of. Check out the links/threads at the search links below where some people seemed to have a remedy.

http://www.google.com/search?hl=en&i...=Google+Search

http://groups.google.com/groups?as_q...59-1&lr=&hl=en


Hope this helps and Good Luck.

Tufenuf

Another pretty picture
http://isc.incidents.org/port_details.html?port=137

Don't share the root folder.

Make sure this patch is installed
http://www.microsoft.com/technet/tre...n/MS00-072.asp

Unbind TCP/IP for your internet adapter from Client.
http://grc.com/su-bondage.htm

Block these ports using a firewall.

This one now gets a writeup at symantec
http://securityresponse.symantec.com...rv.e.worm.html

Stand-alone Opaserv and Bugbear cleaners now offered by Eset here . HTH Pete