W32/Opaserv.K Worm

 Information about the W32/Opaserv.K worm:

W32/Opaserv.K is a network worm, which is a variant of Opaserv. This worm attempts to spread across open network shares. This worm infects Windows systems.

Upon execution of the worm, it copies itself as Mqbkup.exe to remote computer. It modifies the registry at the following location to load itself during the next startup.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

After this worm attempts to spread on the network. It checks for write access on the remote systems in the network. If write access is enabled, it copies itself to the Windows folder then it tries to alter WIN.INI of the remote system to load itself during next startup.

The worm has got a payload of overwriting the boot information of the hard disk. It also deletes the data in the infected systems's hard disk.

This worm first appeared on 24th December 2002.

 Other names of W32/Opaserv.K worm:

This worm is also known as W32/Opaserv-L and W32.Opaserv.K .