On Tue, Dec 03, 2002 at 01:54:13AM -0800, rhonn tabanao wrote:
> Recently I was infected with W32.Opaserv.Worm and
> luckily Norton detected it and deleted the files.
> But I was wondering why everytime I run my computer
> there is another infection.
> I think that there is something triggering or loading
> it that Norton can't find.
There are many bugs and holes in MS Internet Explorer and Outlook and Windows.
Unfortunately updating does not help much, because many bugs
have not been fixed yet.
Dont use MS-products for Internet or at least set Active Scripting and
Javascript in Explorer and Outlook to disabled. However you can not use some
sites with these settings; use netscape mozilla or opera instead.
Do not open attachments. Disable the autoview function in outlook.
Detailed to your problem: opaserv is a worm that uses open file shares.
Disable your shares (network access to your hard drives and printers) or at
least use a firewall that allow only access from some of your computers you
really need. Maybe one of your other computers in your local network is
infected too. I found a opaserv here too. It could not use fileshares,
because the computer did not has such. Maybe opaserv is also using
Outlook/IE to spread.
Matthias
--
Author: Matthias Weingart
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB CHIPDIR-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
