Opaserve

Have been Got by Opaserve. Its probably reloading as I type. I use AVG as a paid up member, have downloaded House call, and symantics Free fix. they all find the blighter . delete and declare i am now safe. I have opened the **** thing up. and edited the text. On the basis that if it thinks it's still there it wont, come back. However it does each and every time I log on. I'm not sure whether its actually, logging onto its own site or simply recycling within my PC when I go on line.
Have reloaded 98, to no avail. downloaded all relevant 98 patches,

I suspect I need to take out I.Explorer, or Outlook Express. and start again there . but not sure how.

Any suggestions good people.

Incidentally I believe this was downloaded via a e-mail. from a respected source. the mail appeared for just a mment and suddeny dissappeared, Though it was there long eneough for me to recognise the layout.

Thanks

Ken

 

Install this patch. See here too.

 

opas

thanks brett, ithink the disabling of file sharing, sorted it. have now been on line for a while. and no re emergence.
It would be helpful if the anti virus developers could make this sort element more obvious. AVG certainly gave me no indication of doing this. whilst others, it wasnt exactly clear. to the likes of me. what had to be done. The site you sent me too, gave full explaination.
Does this mean however that there remains on my PC corrupted files, that might one day re emerge, if those tcp ip settings are put back.


Next time im in the Isle of Man I owe you a jar.
Cheers

ken

 

Hi Kenneth
Perhaps try running the removal tool as well?

Daizy

 

thank you daizy,

yes i had tried that one as well.
having altered the tcp ip settings as recommended , i now cant get spinner ( music station) to work. Have uninstalled and tried again. but get an error message whilst playing. This message came up before, and my guess was it happeneed as Opaserve, made its presence felt. I could be wrong about that of course. I have used a reg. backup to ensure that files are clean, but not really sure about that. Anyway Opas reappeared after i did the reg backup thing.

Sorry im beginnng to Waffle.

If i use a reg back up, does this replace the one in use or merely add to it. That is there were files , in the existing one that were redundant and i had been carefully removing them. on installing the back up, i appear to have reinstalled, reg files previously removed, duh does that make sense?

Is there a good book i can read perhaps, (Wilbur Smith, Alastair McClean) No sorry I meant Windows with some real information in.

Ken

Ken

 

I use this.

What's the error message?

 

Anyway Opas reappeared after i did the reg backup thing.

I hope this is not saying that you had a Virus on the Machine.

Cleaned out said Virus.

Restored an old reg backup and then the unwanted guest came back.

After cleaning out a Virues ANY AND ALL previous backups should be destoryed.

In regard to file sharing. I take that to mean that File and Printer Sharing was bound to TCP/IP. If so that is a NO-NO. And if you are not on a Netwrok it does not even need to be installed.

Speaking of Network. If you are on a Network it would be a very good idea to check ALL other machines.

Now mind you these are just the feeling ( impressions ) that I get from your posts.

BillyBob

 

Daizy--Did you see the name of the book brett said he uses?

 

Welshjim - nope...totally missed it!

 

Yeah OK

Im A dummie.

seriously thank you all for the help

Ken

 

I doubt that you're a "dummie ". You just have knowledge stored in your brain that you can't access yet.

Good luck on your problem.

John

 

Sorry Billybob, missed yours there. you're asking the questions to which Im trying to find out.

I have two machines, disconnected from each other ,have been for abot 10 days. no sign of Opas on the other one.
It was Bindings in properties of TCP/IP-> Dial up adaptor that I removed. the check box on Client for MS Networks,

I presume I wont ever need this again, but who knows. What bothers me is that there is still something in there taht will rear its ugly head, again if I ever install something that requires its use.

Ken

 

To remove this worm fully you should download the fixtool, download the patch, disconnect from the internet, run the fixtool and then apply the patch (in that order).

The worm has almost certainly been re-infecting your system via open and unprotected shares and this means that your current configuration is very probably far from secure. You'll find a wealth of information as to how best to "tighten things up" here.

Suggest that from now on you ensure that you stay up-to-date with MS's security patches and install firewall (in addition to following the steps described on the pages to which I linked).

HTH.

 

Hey kenneth

We were all Dummys at some time or another. I have learned more from my dumb mistakes ( some even intentional ) than I ever did for a darn book.

It was Bindings in properties of TCP/IP-> Dial up adaptor that I removed

Very good. But be forewarned. Check that rascal every once in awhile as somehow ( I have yet to find out how ) it gets re-bound.

And you are correct about not needing it. Even with a Network it is not needed.

I cannot speak for anything above SE. But up to an including SE IPX/SPX and NetNeui handle the Netwrok just fine.

BillyBob