opasoft brasil While infecting remote computers the Opasoft.a worm uploads itself under
the "brasil.exe" or "brasil.pif" name, and writes a corresponding string to a ...The run entry in Win.ini is changed. This refers directly to the worm file
Brasil.pif: run=c:\windows\Brasil.pif Worm/OpaSoft.C version: Name: Worm/OpaSoft. ...Worm/OpaSoft.BC - Full descriptionvirus glossary, viruses, worms, droppers and
trojans ... Next, the worm checks if the file C:\Windows\Brasil.exe or ...I then started up my Norton Anti virus software and it found Opasoft (Brasil.pif ,
Alevir.exe, and Scrsvr.exe) and fixed it. However it did not find DUPATOR ...Opasoft.a (aka Brasil) Opasoft.a, also known as "Brazil".is a new variant of
the "Opasoft" worm and was found "in-the-wild" on Oct. 19-20, 2002. ...Description: Opasoft (also known as Opaserv, Alevir, ScrSvr, Brasil, and Marco)
was first detected by InVircible when it tried installing itself to IV ...Variants of Opasoft use different names for the driver, among them are Alevir,
Brasil, Marco!, or Instit.bat. Opasoft is a 'share aware' worm that ...When activated, Worm/OpaSoft.BC checks for 'BrasilOld' in the registry entry:
... Next, the worm checks if the file C:\Windows\Brasil.exe or ...When activated on Windows 95/98/Me Computers, Worm/Opasoft.E checks for 'BrasilOld'
in the registry ... If not, the worm checks for 'Brasil' in the entry: ...Az eredeti "Opasoft.a" féreg nincs tömörítve. A Brasil variánst ezzel szemben
eloször a PCPEC segédprogrammal kódolták, majd UPX segítségével ... |
