Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
I have a small network of 3 PC's. I have shared internet access using sygate sharing software. I use Norton's antivirus and the virus definitions are up to date.
The W32.Opaserv.Worm virus was identified on the internet connected PC. I disconnected it from the internet and the network and ran the fix tool I downloaded from symantec website (I also installed patch). I disconnected both other PC's and did the same with them(even though they were not infected).
I followed the instructions closely but everytime I reboot the virus seems to appear again on the internet connected machine.Any help would be appreciated.
Hi Niall
Just a thought....
I can't see any reason why this should make a difference but it may be worth a go.
Install the modem into one of the other PC's.
Install anti-virus on to that PC, and make sure that it is COMPLETELY up to date with everything - run the Norton Live update repeatedly until it says there are no more updates available.
Go into Norton anti-virus's options and set it to the highest level of security in the Bloodhound Manual scan setup bit.
Where there's the option for "Exclusions" - remove any exclusions so that it will scan the whole lot.
Next, connect this PC up to the one which still has the virus, via your network.
Using the Norton Anti-virus on the non infected PC, Scan the hard drive of the infected PC.
Try that and see how you get on.
Hope this helps
Regards
Simon.
0 
Here is some removal information as well from Microtrend.
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.A
0
Instead, ask norton to scan all files (not just program files) for teh virus before u unplug-plug-the-modem drill.
0
I've seen this on my network, after running the tool - the PC's become reinfected.
Remove the shares, then run the tool on each PC.
Make sure each PC has an up to date virus checker.
Check the win.ini for the run=Scrnsvr.exe
line, sometimes the tool doesnt remove it.
0
Check the security and virus section here, there is a ton of info on the virus there.
disconnect all of your PC's from the network untill you are sure they are all clean. Other wise they will just keep infecting each other.
0
Do NOT remove all exclusions under NAV, or you will get errors on your next restart. Make sure you leave the *.nch and *.dbx exclusions intact. NAV needs these to work properly. If you do not need TCP/IP on your LAN, you can unbind it from your filesharing. Remove the virus as detailed above and then install a firewall!
0
How are you connected to the Internet? If your IP address remains the same, the virus may be finding you repeatedly.
A hardware router provides a lot of protection for $50-$75, especially if you have DSL or cable Internet.
Check that you are not sharing the C:\ (root of C drive) on any of the computers without a share password. Viruses love you to do this because it gives them access to the Windows folder.
John
0
I did this and it actually worked. Reason is
because the virus was memory resident. When
you get the virus out of the infected pc,
shut it down and unplug the whole thing
from the wall outlet for at least 5 minutes.
This will get rid of the memory resident
bugger. Post back if this helps or not.
0
Thank you for all your suggestions.
While I did run the W32.Opaserv.Worm virus fix tool I downloaded from symantec website it said all the PC's were clean.
I eventually checked them individually and found the offending file 'macro!.srv'. the fix tool did not aleart me to the fact that this was on the PC. Every time the PC this was on rebooted it passed the virus back to the other PC and on and on.
Hopefully it is sorted now.
0  |
 |
 |
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
