help with a worm!

i dont know if this the right place to post it but i been having with a worm that infects my PCs... i have the latest norton antivirus and up to date virus definition but the problem is that it keeps coming back and norton av couldnt do anything... i reformatted all my pcs(4) and all other partitions so its like a new harddisk but still it comes back... what can u suggest the best antivirus software that can prevent or stop worms from infecting a file or spreading through out the network... thx
 
any ideas what this worm is called !? it may aid us to help you find a cure ?!


also try here its free online scanning http://housecall.antivirus.com/ upto date free antivirus checking :)

also if you have formatted then the worm resides on something you have installed/ downloaded or from a web page you have visited its very unusual for one to survive a complete format ?!
:confused:
 
VIPER_1069 said:

also if you have formatted then the worm resides on something you have installed/ downloaded or from a web page you have visited its very unusual for one to survive a complete format ?!
:confused:
Agreed, this happens often.. ;)
I would change antivirus too, get Avast or NOD32, I wouldn't trust much Norton :)

PS. Moved your thread in the computer secuity section :)
 
worm name : W32.Opaserv.E.worm

what it does is create 2 files (Alevir.exe and Brasil.exe) then it write into sys.ini and create a shortcut brasil.pif everytime windows restart. Norton AV just delete these 2 files but it keeps on coming back. Now my 4 PCs infected with this worm and Norton AV cant remove the worm... any suggestions and solutions? And Avast can prevent these kind of worms and similars???
 
check this out: http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.worm.removal.tool.html
i didn't it yet, to much to translate;

And the most important question is: Where from do you get the worm each time?
you have to find the source (mail, file) and to dump this thing;


Greetings from
Duracell


edit: now i have read the symantec site (link above) and there is exactly written, what you have to do; Just do it now!
to the team: sorry for the red, but i think it's so much important;
 
Last edited:
A virus can survive a full format if it infects the MBR. One of the very oldest viruses infects the MBR - stoned.monkey.a. That's the one that was supposed to give you the message "Your computer is now stoned" when you booted into DOS, but usually didn't because of a bug. I did see that one time when a guy in the office came to me and asked what it meant if the computer says its stoned, after a floppy that hadn't been accesses in about 4 years was used, and left in the drive before powering off and rebooting with it still in the drive.

NoSpam
 
Last edited:
Top