Virus Alert

lady hawk

TCS Member
Thread starter
Adult Cat
Joined
Oct 13, 2001
Messages
149
Purraise
0
Location
Australia
Hi all,
Well looks like there's a new kid on the block
I-Worm/Bugbear
AKA
I-Worm/Opas
It Is a worm which is able to distribute itself through e-mail and hard drive network sharing. After it launches itself, the worm copies itself into %Windir% folder under ScrSvr.exe name and creates a following key in the windows registry:
HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\ScrSvr=%W inDir%\\ScrSvr.exe
The Worm tries to find a computer where whole disk full_access sharing is allowed, and copies itself into Startup folder, which enables its launching. This worm then tries to connect to www.opasoft.com, server, which is already disabled at this time.

Keep safe guys update your virus scanners.
AVG ,Symatec and McF have cures for it.
This one is a real booger bear.

Tish +
 

debby

TCS Member
Veteran
Joined
Nov 5, 2000
Messages
10,983
Purraise
4
Location
Iowa
Wow! Thanks for the info! I hope my Norton anti-virus will catch this one! I may need to run a live update on it.
 
Top