Opaserv.-- Problems

From: <derma22(at)zonnet.nl>
Date: Fri Nov 22 2002 - 06:46:19 EST

('binary' encoding is not supported, stored as-is)

Hello all ,

I have a problem with the virus called WIn32.Opaserv.A (can be .A.B.C.D.E) always a different match when looking for it with a virus scanner . I have disconnected the 5 computers from the network and scanned them 1 by 1
. First with F-prot (4dos) , removing the infected files and restoring some
from the windows 98 cd . After that i scanned them with Norton Antivirus 2003 , with latest vir definitions and patches . The computers seem to be clean when scanning them one by one without an connection to the network But two computers keep finding this virus when connected to the network . I
double scanned all systems , no viruses . But when attached , it keeps changing the win.ini file .

What i discovered on several computers was the distributed net client (wich
we know from the RC5 and all those projects) . After googeling up the mail address found in the dncnet.ini , it told me that it was a so called Hyder Worm .

So i'm a bit confused here , what's going on . ANd how come this virus pops-up after 2-3 hours when working on the network . System is blocked with ZoneAlarm na protected by Norton Antivirus 2003 . So
there is nobody coming in from the outside . I know that for sure . (even with ADSL disconnected the virus pops-up)

Any ideas ...         Received on Mon Nov 25 19:39:57 2002