[THIN] Re: OT Opaserv virus
- From: "Martin F. Daly" <mdaly@xxxxxxxxxxxxxxxxxx>
- To: thin@xxxxxxxxxxxxx
- Date: Wed, 13 Nov 2002 08:16:28 -0500
Jeff,
2 suggestions...1.) run the clean and AS SOON AS IT IS DONE, pull
the power cord on the machine...some viruses re-infect when you do
anything else. 2.) Disconnect the floppy drive cable and when the user
comes to you saying that they can't run a particular program that they
usually run, you then can clean the floppy they bring to you...( the
theory here is that if you ask if they have put any floppies in the
drive, you may not be getting a straight answer, whereas if you unplug
the drive cable, they will then come to you at the right
time).unplugging a modem would follow the same logic here....
HTH
--- marty ---
Turnhout, D. van (Hoge Raad) wrote:
>Try another cleanup tool?
>
>Or... Remove some registry keys:
>http://www.trendmicro.com/search/google/results.asp?q=opaserv
>
>-----Original Message-----
>From: Jeff Stockard [mailto:JStockard@xxxxxxxxxxxxxxx]
>Sent: woensdag 13 november 2002 13:30
>To: thin@xxxxxxxxxxxxx
>Subject: [THIN] OT Opaserv virus
>
>
>
>I have a client PC that is infected with the Opaserv e and the Opaserv g
>virus. I went to the Symantec site and downloaded the tool to fix this
>(onto a floppy from a clean PC and write protected the floppy to avoid
>cross contamination). I took the PC off the network, turned off Auto
>Restore (Windows ME) and booted to safe mode. I ran the tool and the
>virus came back. I followed the same procedures again (the directions
>say to run this until the PC comes up clean). The tool said I did not
>have the virus any more. Two days later (still off the network and Auto
>restore still off) she had the virus again. This time I manually
>deleted every file listed on the Symantec instructions (brasil*.*,
>cuzao*.*, cronos*.*, marco*.*, scrsvr*.*, tmp.ini and put.ini(from all
>directories)). When I rebooted her PC before I went home, the virus was
>back. Does anyone have an idea where this could be coming from? Thank
>you, Jeff Jesus Loves You
>
>***********************************************
>For Archives, to Unsubscribe, Subscribe or
>set Digest or Vacation mode use the below link.
>
>http://thethin.net/citrixlist.cfm
>
>
>
>
>***********************************************************************
>Aan dit bericht kunnen geen rechten worden ontleend.
>Ministerie van Justitie.
>***********************************************************************
>
>
>***********************************************
>For Archives, to Unsubscribe, Subscribe or
>set Digest or Vacation mode use the below link.
>
>http://thethin.net/citrixlist.cfm
>
>
***********************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
Other related posts:
