|
PureBytes Links
Trading Reference Links
|
Actually happy99 is a worm not a virus.
Don't remove wsock32.ska this is a copy of your original wsock32.dll which was
replaced with a corrupted version which will mail out copies of itself to any
email or newsgroup recipient. Instead, remove wsock32.dll then rename
wsock32.ska wsock.dll.
Be sure to remove all instances of happy99.exe from your computer, and remove
all of the other ska files as per Kevin's message. Also if you ran happy99 when
you were online, and have not yet rebooted, you may have instructions in your
registry to insert the worm.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce=SKA.EXE
If you have not run happy99.exe when you received it, you should not be
infected.
If you remember running a program you received which popped up a window
displaying fireworks, you probably are infected.
It is easy to be infected and not realize it. To be sure, send yourself email,
If you receive 2 messages instead of one with the same subject line and one of
them contains happy99.exe then you need to be wormed.
KEVIN MALONE wrote:
> Hi Chris
>
> This is more of a nuisance program than a virus and current anti-virus
> software does not detect it.
>
> We had it on some lists we were on last week and got rid of by following the
> instructions below that some techies gave us.
>
> Hope this helps
>
> -------
>
> Firstly delete the message that the happy99.exe file came with , then follow
> the instructions.
>
> ----------
>
> In your WINDOWS, SYSTEM folder there are 4 files:
>
> liste.ska,
>
> ska.dll,
>
> ska.exe.
>
> winsock32.ska
>
> Just delete these 4 files and then reboot your computer and you should be
> all sorted.
>
> -------------------
>
> -----Original Message-----
> From: Chris Hartwig <wisecor@xxxxxxxxxxx>
> To: metastock@xxxxxxxxxxxxx <metastock@xxxxxxxxxxxxx>
> Date: 05 February 1999 07:44
> Subject: Happy 99 Virus
>
> >The Advanced Get forum was just "infected" with a Virus called Happy 99.
> >Do not open any files with this attachment. I don't know if this has
> >been brought up on this forum but be warned. Chris in Wash. State
> >
> >
--
Best
Barry
mailto:bspreen@xxxxxxxx
|