Troj/OptixP-C

Please follow the instructions for removing Trojans.

Troj/OptixP-C is a backdoor Trojan for the Windows platform which allows a remote intruder to gain access and control over the computer.

When first run Troj/OptixP-C copies itself to:

<System>\expl0rer.exe
<System>\sp00lsv.exe

and creates the file <System>\<current date>.txt which is non-malicious and can be safely deleted.

The following registry entry is created to run expl0rer.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
EXPLORER
EXPL0RER.EXE

The Trojan also drops bebeapuro.exe into the Windows system folder and runs it. This file is non-malicious and can be safely deleted.

While active, the Trojan may send emails to indicate an infection while listening on various ports for intruder connections.