Restoring registry keys after Angel Virus infection

I have Windows 98 and MS Word 2000. I think I have been infected with "angel virus." I already ran NAV Version 8. However, the message "another infected of angel virus" appears where my name should appear when Word opens. Also, the phrase, "Infected with angel virus" appears at the lower left of Windows Explorer (not IE). How do I remove those messages? Am I still infected?


    Requires Free Membership to View

    Login

I asked my good friend and virus guru Dr. Igor Muttik about this one. He told me that this is the W97M/Opey virus, which has set Application.UserName = "Another infected of Angel virus."

AV software does not usually restore the registry keys, as there is no way to find out what they were before the infection occurred.

Before you do anything else, make a backup of your registry, and learn how to restore if things go wrong.

Then, use regedit to search in the registry for the string you wish to change back to something which makes more sense to you.

For more information on this topic, visit these other searchSecurity resources:
Best Web Links: Malware
Virus Prevention Tip: Cleaning out a virus infection


This was first published in February 2002

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top