aneel.exe - Dangerous
aneel.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
W32.Neela is a worm that spreads by copying itself to removable devices. It also attempts to disable antivirus applications.
Related files:
C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\Recent\index.dat
C:\Documents and Settings\Administrator\Application Data\Microsoft\Office\Recent\Word Template.LNK
C:\Documents and Settings\Administrator\Local Settings\Application Data\Administrator.task\csrss.exe
C:\Documents and Settings\Administrator\Local Settings\Application Data\Administrator.task\lsass.exe
C:\Documents and Settings\Administrator\Local Settings\Application Data\Administrator.task\services.exe
C:\Documents and Settings\Administrator\Local Settings\Application Data\Administrator.task\smss.exe
C:\Documents and Settings\Administrator\Local Settings\Application Data\Administrator.task\winlogon.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\Word Template\2.doc
C:\Documents and Settings\Administrator\Local Settings\Temp\Word Template\lsass.doc
C:\Documents and Settings\Administrator\Local Settings\Temp\Word Template\services.doc
C:\Documents and Settings\Administrator\Local Settings\Temp\Word Template\smss.doc
C:\Documents and Settings\Administrator\Local Settings\Temp\Word Template\winlogon.doc
C:\Documents and Settings\All Users\Application Data\Normal.exe
C:\WINDOWS\system32\execute.exe
C:\WINDOWS\Tasks\At1.job
C:\WINDOWS\aneel.exe
C:\WINDOWS\l33na.exe
C:\WINDOWS\leena.ini
C:\Read This.exe
Kill the process aneel.exe and remove aneel.exe from Windows startup.