Home > General > Scrsvr.exe


Act Now! Product name: unknown Process name: unknown manufacturer: unknown Website manufacturer: unknown Standard path: unknown Category: WARNING: Dangerous program (Trojan horse)! We recommend using the free antivirus software AVG Anti-Virus Free. System Tools SpeedUpMyPC PC Mechanic Toolbox ProcessQuicklink Copyright © 2004-2016 Uniblue.

This award winning software will deep scan your registry to identify problems and errors that can cause instability and slowdown. The Opaserv.O variant was a close variant of Opaserv.G worm and it also had an embedded trojan. One of worm versions writes log data about scanned and infected machines to the "ScrLog" and "ScrLog2" files. This may be either C:\Windows on Windows 95/98/Me systems or C:\Winnt on Windows NT/2000 systems. http://www.liutilities.com/products/wintaskspro/processlibrary/scrsvr/

The existence of the Tmp.ini file in the root of drive C. Latest entries 0x00000057 Relay Acces Denied Windows Registry Win2000 Oraops9.dll: Outlook Express Oe Spdstrm.exe Error 605 Ie Errors Free Data Recovery Download 10054 Error System Restore Acces Denied Error_resource_not_present Hp Printer The new variant was packed with PECompact file compressor and was installing itself to system as MQBKUP.EXE file. Variant:Opaserv.N (Worm.Win32.Opasoft.f) In the beginning of January 2003 there appeared a new variant of Opaserv worm.

Process name: OPASERV virus Application using this process: OPASERV virus Recommended: Scan your system for invalid registry entries. ScrSvr.exe Status : Not OK ScrSvr.exe Description : You have the OPASERV virus. Antivirus Protection Dates Initial Rapid Release version September 30, 2002 Latest Rapid Release version December 4, 2016 revision 023 Initial Daily Certified version September 30, 2002 Latest Daily Certified version December Alternatively, you can also purchase the full version right now.

When a share is found, the worm exploits an older Windows network share vulnerability tocreate a copy of itself as C:\Windows\scrsvr.exe. Reports indicate that the wormdoes not execute properlyon Windows NT/2000 systems. Virus definitions are available.ImpactWin32.Opaserv searches the network for Windows drive shares and attempts to connect and update itself over the Internet. http://www.processlibrary.com/en/directory/files/scrsvr/24916/ Network shares should belimited torequired network segments to prevent the spread of malicious code across theshared drives.Patches/Fixed SoftwareA daily update from AVP to detect Worm.Win32.Opasoft is available at the following link:

Win9x machines are infectable while the infectinon of WinNT-based machines is highly unlikely and almost impossible. Non-system processes like scrsvr.exe originate from software you installed on your system. THE ALERT, AND INFORMATION CONTAINED THEREIN, ARE PROVIDED ON AN "AS IS" BASIS AND DO NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR How to fix scrsvr.exe errors If Windows notifies you of scrsvr.exe errors, the cause may be the result of damaged or corrupted registry entries.

Using a cloud backup service will allow you to safely secure all your digital files. https://www.symantec.com/security_response/writeup.jsp?docid=2002-093011-2800-99 Because the server at www.opasoft.com is down, it is not possible to get more information about this backdoor routine. Variant:Opaserv.G (W32/Opaserv.worm.G, Trojan.Win32.KillWin.m, W32.Opaserv.M.Worm) Also in the end of December 2002 there appeared another new variant of Opaserv worm that also carried a trojan inside its body. Step Four: Click OK to confirm the modification.

Eliminating a Local Network Outbreak If the infection is in a local network, please follow the instructions on this webpage: Eliminating a Local Network Outbreak Technical Details The worm installs itself This particular code can be used by the supplier to identify the error made. Note: This guide was originally published under WIKI_Q411444 What exactly is Scrsvr.exe error? This file is then run, and replaces the existing worm copy.

Scan your system now to identify issues with this process and services that can be safely removed. Also, before doing so, if you are using Windows 95/98/Me, you must download and install the Microsoft patch from http://www.microsoft.com/technet/security/bulletin/MS00-072.asp If you are on a network, have a full time connection For more information, please call us at: 1-888-NOPIRACY If you are outside the USA, please look up the correct contact information on our website, at: www.bsa.org Business Software Alliance Promoting a It is highly recommended that you run a FREE performance scan to automatically optimize memory, CPU and Internet settings.

We recommend that you remove this program. Get advice. If the worm is not being run as this file, it creates a copy of itself as \%Windows%\scrsvr.exe and adds the value ScrSvrOld to the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run The worm

scrsvr.exe In order to ensure your files and data are not lost, be sure to back up your files online.

Step Eight: Go to My Computer, utilize Search utility to search for the associated files_old of the program, and then remove them. In most cases, it helps to check the Windows registry for scrsvr.exe errors! Step Six: Go back to the Windows Desktop, and then type regedit.exe on to the Run box to run Registry Editor. Step Seven: Click OK to confirm the modification.

The vulnerability specifically attempts to connect to theC:\ drive share of random IP addresses.To exploitthis vulnerability, the C:\ shared drive and Windowsmust be installed in the default directory and Full access The worm does not carry a destructive payload, but worms that are connected to the web site may have downloaded destructive payloadsbefore the web sitewas shut down.SafeguardsUpdate current virus definitions and The embedded trojan is a time bomb that prevents a computer or its operating system from starting when the payload is activated. This worm also attempts to download updates from www.opasoft.com, although the site may have already been shut down.

The problem: Do you find that your PC is acting weirdly lately with frequent message popping up? scrsvr.exe Click here to run a scan if you are experiencing issues with this process. Website protected worldwide by official registration.