I recently (yesterday) installed Norton on a two computer LAN. On the first it discovered a couple of viruses and then the machine basically went haywire. It is impossible to run any applications- dialogue box appears saying "Windows cannot find nrsi. This programme is needed for opening files of type 'Application'" I suspect that it is associated with Opaserv because on start up there were also references to the various file names that have been mentioned in other posts I have read about that particular *@£!!! of a virus. However, I have seen absolutely nothing anywhere that refers to nrsi so I am confused as to whether it is connected at all. I can't follow the instructions I have found for Opaserv removal because I can't even run regedit!!!! I did manage to run "edit c:\windows\win.ini" and found and deleted the run= line that contained the offending exes but that is all so far. I am about to try and run the virus removal from the a drive to see if that works. I am accessing this forum from the other (clean) computer on the network (which I have of course disconnected) and will keep checking to see if anyone has had any bright ideas. I really hope so, I am at my wits end as to what to do about this.

Try booting in safe mode and see if it helps.

I tried - it didn't help Nor did my attempt at virus removal from the a drive. Thanks for the suggestion, thought - any other comments more than welcome. Has anyone else out there even heard of this happening?

Hmm...it doesn't sound like its an Opaserv variant yet. Reasons for this 1)no extension on nrsi, all the others had an extentions 2)the opaserv worm error messages didn't try to launch any application, it stated something the effect that the file listed in win.ini isn't found. 3) the nrsi wasn't in your win.ini file in the run= line I did some googling for "nrsi virus". The second site mentioned a Word macro virus that has "nsri" in the text. Another clue may be that symantec's sites that describes the opaserv worm and its variants mention that other viruses sometimes get packaged with the Opaserv worm. However, I'm betting its not a virus at all. There's a few acronyms for NRSI that you might want to investigate further, for example: Non-Roman Script Initiative is one. Its mentioned on this site: http://www.sil.org/computing/noc/ctwcreport167.htm Maybe that'll help you out. If not, just google around some more. Brad Peterson b_peterson@yahoo.com

Hi, check the registry for entry nrsi... if you find one and its in the [HKEY_CLASSES_ROOT\exefile\shell\open\command].. change the value to "%1\" %* P.S. since the value tries to run the nrsi when u execute an exe file. Copy the regedit.exe file and rename it to regedit.com... You will be able to access the registry