W32.Opaserv.Worm Removal Tool Available!!

[Tufenuf]

Since a lot of computers seem to be getting infected with the "W32.Opaserv.Worm" Symantec(Norton) has just relesed a Removal Tool. You can read the instructions and download it at the link below.

http://securityresponse.symantec.com...oval.tool.html

Tufenuf

[HondaNSX12]

Thanx man

[Ess]

I too have had this wretched virus which has been using scrnsvr.exe in win.ini and who knows where to reinfect me.
If you look through postings from the very helpful people in subject forum you will see the problem/s I have/am having!
Hve run the NAV worm remover, deleted run=scrnsv.exe in win.in time after time but virus reapears. Seem it is able to write to win.ini and startup each time I use the net!
At the moment NAV is stopping and quarantining it.
ooops! Just happened again...

Anyone out there with a solution - PLEASE!!

[Tufenuf]

ESS, The below solution is from Muk1wa on Pg 4 of the thread at the link below.

http://discussions.virtualdr.com/sho...4&pagenumber=4




I HAVE DEFINITELY GOT RID OF IT!!!!!

Go to your internet settings, then the properties of your tcp/ip protocol and disable the 'Client for Microsoft Networks' & 'File and printer sharing for Microsoft Networks' bindings.

I am on a 2 machine network with a shared 'c' drive on one machine (the one with the problem). I can still access my shared c drive and my printer!

For 3 hours i have been scrsvr.exe free and my win.ini file is untouched.

For more info see http://grc.com/su-bondage.htm


YIPPEEEEEE!!!!!!

HTH
Tufenuf

[Ess]

Thanks Tukenof very much.
I have carried out recommended "set up" and, so far this present browsing, not one hit!!!
I have not entered the dark and mysterious win.ini but have run msconfig where there is no mention of scrnsvr.exe.
I am perturbed that, perhaps to my obvious lack of knowlege, I did not find Norton helpful. Indeed I ran their Worm Remover which showed clear.
They did not (or I am not intelligent enough to find!) show me exactly where run=.....scrnsvr.exe was etc.

[Ess]

Hi Tukenof,
Still working fine, as far as not seeing scrnsvr.exe etc. BUT....I cannot use my printer or hyperlinks!
Also the "Google" bar is missing. Obviously I have done something wrong. Must be linked with allowing\not allowing printer sharing. After the problem with this horror I am loth to "tinker" around too much.
What exactly did you do with the TCIP binding?

[r00tstep]

thanks Tufenuf for the link, I checked all of the pcs and so far, so good.