Ask the Expert

Restoring registry keys after Angel Virus infection

I have Windows 98 and MS Word 2000. I think I have been infected with "angel virus." I already ran NAV Version 8. However, the message "another infected of angel virus" appears where my name should appear when Word opens. Also, the phrase, "Infected with angel virus" appears at the lower left of Windows Explorer (not IE). How do I remove those messages? Am I still infected?


    Requires Free Membership to View

I asked my good friend and virus guru Dr. Igor Muttik about this one. He told me that this is the W97M/Opey virus, which has set Application.UserName = "Another infected of Angel virus."

AV software does not usually restore the registry keys, as there is no way to find out what they were before the infection occurred.

Before you do anything else, make a backup of your registry, and learn how to restore if things go wrong.

Then, use regedit to search in the registry for the string you wish to change back to something which makes more sense to you.


For more information on this topic, visit these other searchSecurity resources:
Best Web Links: Malware
Virus Prevention Tip: Cleaning out a virus infection


This was first published in February 2002

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: