Win32.NetAngel
Title: Win32.NetAngel
Also Known as: Win32.NetAngel, Win32NetAngel, NetAngel
Severity scale:
Spyware program, Win32.NetAngel, performs a variety of functions but is characterized as a backdoor Trojan. Its author, StTwister, released this nuisance onto the public in August of 2004. Written in Delphi language, Win32.NetAngel is no angel. Its abilities should be cause for great concern as it will be able to turn on and turn off your computer, activate the screen saver, empty your recycle bin, log your keystrokes and much, much more. Once it enters, it will embed itself into your system’s registries under random and cryptic names making it very difficult to detect.
AKA:
Backdoor.Win32.NetAngel.g
Backdoor.Win32.NetAngel.c
Backdoor:Win32/NetAngel.A
Backdoor.Win32.NetAngel.h
Backdoor.Win32.NetAngel.j
Backdoor.Win32.NetAngel.k
Related Files:
BF3109E1.EXE
533F2397.EXE
28C22EE0.EXE
Category:
Backdoor Trojan
Recommended Action:
Remove at once.
Manual removal of Win32.NetAngel involves removing the following registry files:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun@^WinLogon
Then, remove these registry keys:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{42CE4021-DE03-E4CC-EA32-40BB12E6015D}
Lastly, delete the following infected files:
%system%msqurt.dll
%system%winlog.exe
Manual removal is quite complicated and difficult if you are at all unsure of what you are doing. These programs are designed to come right back if not un-installed properly. For a surefire method of removal, you can use SpyZooka.
SpyZooka is an incredibly effective and safe anti-spyware application brought to you by ZookaWare. SpyZooka offers a free initial scan and a guarantee to remove all spyware or your money back. You can’t go wrong!
