Remove Annew. Description and removal instructions

 
Title: Annew

Type: Worms
Severity scale:Annew severity is 50  (50 / 100)
 
Annew is a worm that spreads by copying itself to removable media and local drives. Once executed, it secretly installs itself to the system and runs a payload. The parasite disables Registry Editor, Task Manager and Command Prompt. It also turns off System Restore, hides Find and Run utilities and modifies some system settings. Annew then displays fake error message. The worm is able to terminate some security-related processes. It runs on every Windows startup.


Related files: default.exe, msnmsgr.exe, quick launch.exe, [X].exe, msdos.pif

Annew properties:
• Hides from the user
• Stays resident in background

Automatic Annew removal:

remover for Annew

Annew manual removal:

Kill processes:
default.exe, msnmsgr.exe, quick launch.exe, [X].exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\msnmsgr
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\msnmsgr
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell=explorer.exe %Windir%\msdos.pif
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableCMD=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr=1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System\DisableCMD=1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System\DisableRegistryTools=1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System\DisableTaskMgr=1
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableConfig=1
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableSR=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFind=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoLogoff=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders=1
Delete files:
default.exe, msnmsgr.exe, quick launch.exe, [X].exe, msdos.pif
Misc:
[X] is a random file name.

Exact file location:
[X].exe - C:
msdos.pif - C:\WINDOWS or C:\WINNT
default.exe - C:\Program Files\Common Files
msnmsgr.exe - C:\WINDOWS\System32 or C:\WINNT\System32
quick launch.exe - C:\Documents and Settings\[Current User]\Application Data\Microsoft\Internet Explorer\Quick Launch

Other programs to remove Annew:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 09/02/07
Information updated: 09/02/07

Additional resources related to Annew:

Attention: If you know or you have a website or page about Annew removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Annew parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: