Hi all,
Well looks like there's a new kid on the block
I-Worm/Bugbear
AKA
I-Worm/Opas
It Is a worm which is able to distribute itself through e-mail and hard drive network sharing. After it launches itself, the worm copies itself into %Windir% folder under ScrSvr.exe name and creates a following key in the windows registry:
HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\ScrSvr=%W inDir%\\ScrSvr.exe
The Worm tries to find a computer where whole disk full_access sharing is allowed, and copies itself into Startup folder, which enables its launching. This worm then tries to connect to www.opasoft.com, server, which is already disabled at this time.
Keep safe guys update your virus scanners.
AVG ,Symatec and McF have cures for it.
This one is a real booger bear.
Tish +
Well looks like there's a new kid on the block
I-Worm/Bugbear
AKA
I-Worm/Opas
It Is a worm which is able to distribute itself through e-mail and hard drive network sharing. After it launches itself, the worm copies itself into %Windir% folder under ScrSvr.exe name and creates a following key in the windows registry:
HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\ScrSvr=%W inDir%\\ScrSvr.exe
The Worm tries to find a computer where whole disk full_access sharing is allowed, and copies itself into Startup folder, which enables its launching. This worm then tries to connect to www.opasoft.com, server, which is already disabled at this time.
Keep safe guys update your virus scanners.
AVG ,Symatec and McF have cures for it.
This one is a real booger bear.
Tish +