how can I delete ann.exe?

Question

I have read that it is a backdoor trojan/virus. But there is not alot in the way of help, in removing the file.
I have used AD-Aware. It removes it, but once you do a restart, the virus is back again.

Answer 1

All of these are ones that I personally use and all are free.

I-Worm/Stration · BackDoor.Generic3.GBB and .GBC · Worm/Generic.FX · Exploit.WMF
http://free.grisoft.com/doc/5390/lng/us/tpl/v5

Spybot - Search & Destroy detects and removes spyware, a relatively new kind of threat not yet covered by common anti-virus applications. Spyware silently tracks your surfing behaviour to create a marketing profile for you that is transmitted without your knowledge to the compilers and sold to advertising companies. If you see new toolbars in your Internet Explorer that you haven't intentionally installed, if your browser crashes inexplicably, or if your home page has been "hijacked" (or changed without your knowledge), your computer is most probably infected with spyware. Even if you don't see the symptoms, your computer may be infected, because more and more spyware is emerging. Spybot-S&D is free, so there's no harm giving it a try to see if something has invaded your computer.
http://www.safer-networking.org/

http://superantispyware.com/
SUPERAntiSpyware is the most thorough scanner on the market. Our Multi-Dimensional Scanning and Process Interrogation Technology will detect spyware that other products miss! SUPERAntiSpyware will remove ALL the Spyware, NOT just the easy ones!
Easily remove over 100,000 pests such as SmitFraud, Vundo, WinFixer, SpyAxe, SpyFalcon, WinAntiVirus, AntiVermins and thousands more!
Make sure after you download any of these, that you update them.
If none of these remove it, you might have to remove it in safe mode.
Instructions for safe mode.

For Windows XP

If the computer is running it is best to shut down Windows and then turn off the power.

Begin by first clicking on the Start Button and then click on Turn Off Computer.

Now click on the Turn Off red colored icon to shut down your computer system.

It is best to wait between 15 to 30 seconds before you turn your system back on.

Turn on your computer and start tapping the F8 key on your keyboard.

Some Computers may display a keyboard error message if you begin tapping F8 too quickly.

Restart your computer again and begin tapping the F8 key a brief second or two later.

When the Windows Advanced Options Menu appears, Choose the Safe Mode option and hit Enter.

Windows will now boot your computer up in Safe Mode.

Answer 2

OK, I am suggesting to go to the web site below, it is symantec company and search for the virus/worm name in their database and if it is there, then you will find the solution there.

Most likely this happens because when the virus/worm is removed from your computer is removed as files and not removed from the Registry, so when you make a restart the registry runs back again the virus, so it becomes active.

I will tell you if my opinion is right where to find this in registry if you are running windows XP:
1- Open start menu
2- Select Run, and type regedit
3- It should open the registry now, if it didn't then install Norton Antivirus and update the virus definitions because some viruses/worms disables opening the registry.
4- Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
5- On the right pan check each key and value and if there is something suspicious you will find the path to the file running it, mark that key and delete it from the registry.

I hope by now the virus would be eliminated.

Answer 3

Before you run Ad-Aware, restart the computer in safe mode.
During boot up, hold down the [Ctrl] key. At some point you should get a menu (white on a black background) and one of the options should be to start in safe mode. Another option is to start with safe mode and network access, you don't want this. Type the number to start in safe mode. When windows is booted up, run Ad-Aware again, then restart the computer in normal mode, the default choice. And check taskmanager, see if Anne.exe is still listed under processes.

Answer 4

disable system restore, google how to do it, then start in safe mode, google that too, or just tap F8 key when u start your computer till the option screen comes up, make sure your keyboard doesnt have F-LOCK on if so equipped. Choose to start in safe mode with networking, then go to www.ewido.net and run free online scan, then go to www.trendmicro.com and do thier scans as well, then go to http://free.grisoft.com/doc/1 and get the free version of AVG, that should fix it. Then restart in regular mode and run all scans again. Once clean restore the system restore.

Answer 5

All programms are listed in your windows programs folder. Go and find this and delete. Also, Run search for files or folders named Ann.exe. Remember to empty your bin.

If this does not work, go to windows help and re-set your computer to a previouse time setting, before you got the trojan.

Answer 6

There's a good list of free virus/spyware removal tools here, also has some good info on how to avoid stuff like this.http://www.basicspywaretips.com/getridofspyware.html

Answer 7

RegSweep is the latest in PC error diagnostic and repair. RegSweep can do a complete scan of your entire file system and registry in under 2 minutes! All corrupt files, paths, and registry keys will be analyzed and automatically repaired so that your PC functions just as when you first purchased it, Guaranteed.

http://onceinlife.regsweep.hop.clickbank.net

Answer 8

right click my computer
click properties
click system restore
then click the tab switch off system restore to all drives
click apply
reboot

once system has restarted run AD aware again to remove then reboot again and check to see if it has returned.
if succesful then switch system restore back on

Answer 9

I easily got for free Folder Lock here http://j.mp/1vjsLcb
Bye

Answer 10

you have whats called a ROOT-kit virus....

http://www.incodesolutions.com/threats/rootannexe.php
This might help.

http://www.geekstogo.com/forum/lofiversion/index.php/t112862.html
Follow this advice to.....

This should fix your problems......

BTW have you tried doing a system restore to some time BEFORE you downloaded this virus?