The National Computer Virus Emergency Response Center of China has discovered through Internet monitoring a new virus called "Angel" (W32.Angel.A), and warns users to be cautious.
This virus infects executable files in the computer system and attempts to connect the infected computer system to download viruses, Trojans, and other malicious programs from designated servers on the network.
After the virus runs, it copies itself to the system directory of the infected computer system and sets its attributes to "system hidden," making it difficult for computer users to find and delete. The virus also modifies the registry startup items of the infected system so that it can automatically run with the system startup.
The virus searches for all executable files in all disk partitions of the system and infects them. The size of the infected executable files will increase, consuming more disk space, and they will no longer function properly. Additionally, during the process of infecting executable files, the virus marks each infected file to avoid re-infection.
Experts remind: For computer users who have already been infected by this virus, it is recommended to immediately upgrade the antivirus software in the operating system and perform a full scan to thoroughly delete the virus; for those who have not been infected by this virus, it is recommended to make sure the "real-time monitoring" function of the antivirus software is turned on to intercept the virus intrusion in real time.