Help.... Pppplllleeeeaaaassssee. Scared newbie going crazy...I'm infected!

[j.romandia]

Hi Folks,

My name is Josh. I'm going crazy. My Windows XP Laptop started giving
me some pop-up trouble last night (tons of popups and strange
activity). I downloaded limewire and bearshare the other day and have
used both services. I'm thinking thats why I'm having problems.

As for the problem... I downloaded Microsoft Defender after the pop-ups
started, and also F-Secure 6 month trial. After I rebooted my machine
to activate the security software the following message appeared:

Malicous Code found in file c:\system volume
and gave the following info: Backdoor.Win32.Optix.aa
Action Taken (by F-Secure): the file was renamed.

Now when I go to my start menu and try to open a program, I am asked
what program to use to open the file... meaning that I have no access
to any of my programs, explorer, etc...

Can you help me understand what I need to do?

Thank you

 

[Heather]

Curious here....did you download any programs from Limewire?? There is
a virus on it and most of the P2P programs which is about 571 kb in
size. It is not in the music part...but in most of the pirated stuff.
If so, that gives these folks some idea of what may have started this.

Heather

 

[David H. Lipman]

From: <[email protected]>

| Hi Folks,
|
| My name is Josh. I'm going crazy. My Windows XP Laptop started giving
| me some pop-up trouble last night (tons of popups and strange
| activity). I downloaded limewire and bearshare the other day and have
| used both services. I'm thinking thats why I'm having problems.
|
| As for the problem... I downloaded Microsoft Defender after the pop-ups
| started, and also F-Secure 6 month trial. After I rebooted my machine
| to activate the security software the following message appeared:
|
| Malicous Code found in file c:\system volume
| and gave the following info: Backdoor.Win32.Optix.aa
| Action Taken (by F-Secure): the file was renamed.
|
| Now when I go to my start menu and try to open a program, I am asked
| what program to use to open the file... meaning that I have no access
| to any of my programs, explorer, etc...
|
| Can you help me understand what I need to do?
|
| Thank you

Yep... P2P software was most likley the cause of your problem.

It sound like the LNK association has been broken.

Download and save the following.
http://www.kellys-korner-xp.com/regs_edits/exefix.reg

Double-Click on the .REG file and allow it to be merged into the Registry. Hopefully that
will fix your problem. Then REMOVE Limewire and Bearshare and license you version of
F-Secure ASAP.

 

[John Gawe]

From: <[email protected]>

| Hi Folks,
|
| My name is Josh. I'm going crazy. My Windows XP Laptop started giving
| me some pop-up trouble last night (tons of popups and strange
| activity). I downloaded limewire and bearshare the other day and have
| used both services. I'm thinking thats why I'm having problems.
|
| As for the problem... I downloaded Microsoft Defender after the pop-ups
| started, and also F-Secure 6 month trial. After I rebooted my machine
| to activate the security software the following message appeared:
|
| Malicous Code found in file c:\system volume
| and gave the following info: Backdoor.Win32.Optix.aa
| Action Taken (by F-Secure): the file was renamed.
|
| Now when I go to my start menu and try to open a program, I am asked
| what program to use to open the file... meaning that I have no access
| to any of my programs, explorer, etc...
|
| Can you help me understand what I need to do?
|
| Thank you

Yep... P2P software was most likley the cause of your problem.

It sound like the LNK association has been broken.

Download and save the following.
http://www.kellys-korner-xp.com/regs_edits/exefix.reg

Double-Click on the .REG file and allow it to be merged into the Registry. Hopefully that
will fix your problem. Then REMOVE Limewire and Bearshare and license you version of
F-Secure ASAP.

I think he has to clean up first.
Maybe a new setup is required

John