Removing Backdoor.optix virus

[DJ Ollie]

HELP!!!!
Have some how managed to pick up the BACKDOOR.OPTIX Virus
even though i have both a firewall and anti virus
software running. My anti virus software will pick up the
virus but it can not heal the files it has infected and
can only sent them to the virus vault. The problem is the
files are my WINIT.EXE & SYSINFO.EXE files that are
infected if it sends these to the vault it screws up my
system. I cant restore to an earlier setting because
there is a huge amount of work i have done recently that
i would loose. Can anyone help? Its got so bad that i
cant access most of my programs now because the virus
shield keeps popping up and messes up the accessing! So i
have had to use someone elses computer to send this.
Thanks in advance
Ollie

 

[Carey Frisch [MVP]]

There is a very helpful virus removal newsgroup you may wish to post to:
news://msnews.microsoft.com/microsoft.public.security.virus

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Virus Removal Tools
http://securityresponse.symantec.com/avcenter/tools.list.html

Online Virus Removal Tutorials
http://www.symantec.com/techsupp/virusremoval/virusremoval_info_tutorial.html

Computer viruses: description, prevention, and recovery
http://support.microsoft.com/default.aspx?scid=kb;EN-US;129972

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

----------------------------------------------------------------------------------


| HELP!!!!
| Have some how managed to pick up the BACKDOOR.OPTIX Virus
| even though i have both a firewall and anti virus
| software running. My anti virus software will pick up the
| virus but it can not heal the files it has infected and
| can only sent them to the virus vault. The problem is the
| files are my WINIT.EXE & SYSINFO.EXE files that are
| infected if it sends these to the vault it screws up my
| system. I cant restore to an earlier setting because
| there is a huge amount of work i have done recently that
| i would loose. Can anyone help? Its got so bad that i
| cant access most of my programs now because the virus
| shield keeps popping up and messes up the accessing! So i
| have had to use someone elses computer to send this.
| Thanks in advance
| Ollie

 

[you have a bad trojan]

info on it from symantec.com

Several variants of Backdoor.Optix have been discovered.
All of them, when executed, open a port on the computer.
This allows a hacker to connect to the computer and perform
any desired actions. All variants discovered will also
attempt to terminate the process for several antivirus and
security products.

Some of the variants may execute additional files when the
file containing Backdoor.Optix is executed. Variants that
send messages using the ICQ network have also been
discovered. The messages are sent to the author of the
Trojan to tell them that an infected computer is online.

Many, but not all variants of Backdoor.Optix create a
Winstart.bat file that can contain various commands. These
commands could include recreating the Trojan if it is deleted.