Help... Opened an email and got a trojan virus called Exploit-ANIfile.c

[Radio_Lady]

McAfee CANNOT clean, quarantine, or remove this (or so it says).

AdAware is running but hasn't found anything. I'm posting this in the hopes someone can help on this holiday weekend. If so, bless you.

Feel free to PM me if you wish. I'm going to go on with this until 2AM Friday morning PT and then going to bed... what a way to end Thanksgiving! Well it's the day after anyway and I'm really upset about this.

If you can direct me to a fix or removal, I'd appreciate it. Husband really got ticked at me for opening an email which was in my SCREENED email in box, but I just forgot.

In peace,

Radio Lady in Oregon

(Crossposted to Computer Help & Support Forum)

[Capn Sunshine]

1. Don't worry, the computer forum guys will save you

They are really happenin' dudes*
Always come through. Always.




*dudes , as in the nongenderspecific usage.

[Radio_Lady]

4. Appreciate your post, Capn Sunshine! What a nice screen name!

Well, I went to a restaurant that figured our the plight of us gals.

Their bathrooms had DUDES and DAMES on the doors! (With pictures, of course!)

In peace,

Radio Lady

[Omphaloskepsis]

2. McAfee's site claims to fix this..

Are your definitions up-to-date?

http://vil.nai.com/vil/Content/v_141860.htm

[Radio_Lady]

3. We're going to have to check this out. McAfee is supplied in the background by our

ISP, Comcast.net.

We'll look into it later, after the two grandkids leave on Sunday evening!

Thanks so much for your help. You folks are great.

In peace,

Radio Lady in Oregon

PS. Omphaloskepsis, it's been nice to chat with you on-line this year. Have a wonderful holiday season!

[catmandu57]

5. Try this

http://www.avast.com it's a free virus program that runs rings around mcafee and norton. Have you tried going in and restoring your system? That may be the easiest way to take care of your problem.

[Radio_Lady]

8. Great suggestions. We will definitely try these if we still have problems.

Thanks, Catmandus57.

Please enjoy the weekend! We've got two little grandkids in tow until Sunday evening!

Wheeeeeee............!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[meow2u3]

12. I run avast

Avast does pick up viruses and trojans that McAfee and Symantec overlook--perhaps because Avast is programmed in Europe, where they don't have a political motive to allow malware that certain rogue Federal government officials who I won't name would like to plant on our computers with impunity. :crazy:

[Radio_Lady]

14. Checked the Avast site and will run it. It looks for certain worms... not everything.

But definitely worth a look-see. So far this afternoon, everything is running smoothly.

[seemunkee]

6. Free on line scan

First reboot into safe mode with network support. To do that hit F8 as your computer restarts.
Next go to this site and run the free on line scan.
http://housecall.trendmicro.com/
Hopefully it will find and clean it. Then reboot normally.

[Radio_Lady]

9. Hi SeeMunkee -- we've gone on line this morning with Comcast to see what they suggest.

The infected email was in my SCREENED email folder. It looked like the name of a friend -- and I should NOT have opened it. I did not see what the message was.

The program prevented a pop-up, did its little buzz, and then the McAfee warning came up instanteously. We ran anti-virus programs all night long. Nothing found.

My husband (the software engineer who went to bed at 3AM!!!) now wonders if McAfee actually caught the virus BUT McAfee's prompt came up at the same time -- with the red screen.

We searched for the file name and found nothing. This morning, everything seems to be OK.

More later. Thanks again for the help.

[Breeze54]

7. How to Remove Exploit-ANIfile.c:

Typical Virus Removal Procedure

http://spyware-malware-removal.blogspot.com/2007/06/typical-virus-removal-procedure.html



This procedure is helpful in removing spyware, adware, malware and other related files.

1. Disable Windows System Restore if you are using WindowsMe or Windows XP

***Disabling System Restore on Windows ME***

- Click Start, Settings, and then click Control Panel.
- Double-click the System icon. The System Properties dialog box appears.

Note: If the System icon is not visible, click "View all Control Panel options" to display it.

- Click the Performance tab, and then click File System.
- Click the Troubleshooting tab, and then check Disable System Restore.
- Click OK. Click Yes, when you are prompted to restart Windows.

***Disabling System Restore on Windows XP***

Note: You must be logged in as an Administrator to do this.
Turning off System Restore will clear out all previous restore points.

- Click Start.
- Right-click the My Computer icon, and then click Properties.
- Click the System Restore tab.
- Check "Turn off System Restore" or "Turn off System Restore on all drives" as shown in this illustration:
- Click Apply.
- When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
- Click OK.
- When you have finished with virus removal please reverse the process to Enable System Restore.

2. Update your virus definition.

If you dont have antivirus you may download free or trial software such as AVG, McAfee, Panda...

3. Reboot your computer in SafeMode.
- Press F8, after the power was turned on
- Select Safe Mode from selections menu

4. Run a full scan and delete infections that are detected.

note:If you are using Windows XP, proceed with these steps, Windows9x and ME please skip.

5. Reboot computer in SafeMode with Networking
- Press F8, after the power was turned on
- Select Safe Mode with Networking from selections menu

6. Connect to internet and scan with the following online scanners:
Trendmicro Housecall
Symantec Security Check
BitDefender Online Scanner

If Unable to Browse Internet, Fix the Damaged with:
Fix For XP Winsock
Internet Explorer Fix

[Radio_Lady]

10. Hello Breeze -- We looked at this last night but decided against starting the process.

We're heavily involved with family members until Sunday night.

Appreciate your suggestions very much.

Have a great weekend, whatever you do!

In peace,

Radio Lady in Oregon

[Breeze54]

11. Then why did you ask for help today?

:shrug:

[Radio_Lady]

13. The thread was started after midnight. I'm sorry, but I don't understand your question.

We were supposed to have four hours free to work with this problem until 1 PM PT. The children came to us several hours early, due to a schedule change. Grandpa took the kids to the mall, so I've been back on this problem for the last little while.

McAfee's Comcast Security center recommended their virus scan. I've got it going now on my computer and using my husband's computer.

Did I offend you in some way? If so, I apologize.

[Radio_Lady]

15. UPDATE: McAfee is running their virus scan as suggested by Comcast.

It has now scanned the directory which was supposed to have the malicious code file in it.

So far, nothing has been found.