(no subject)

geoff Cook (geoff_cook@f1.net.au)
Wed, 31 Mar 1999 06:58:32 +1000

I was recently infected by the happy99 virus, that is spreading itself via
e-mail as was mentioned in an earlier posting to this list. I have now fixed
my system and attach the fix information that I was provided for everyones
reference

Geoff Cook

> Heres the fix for Happy99 viruse
> Luke Blunden
> Plug&Play Computers

> Penelope Mackay-Sim wrote:

> Hi guys,
>
> We have been getting alot of calls on this virus "Happy99" that has been
> going around. The latest downloaded update from nortons anti-virus picks
up
> the virus and fixes it or you can fix it yourself.
>
> The virus is sent as an email attatchment which brings up fireworks and
says
> "Happy New Year" or something along those lines.
>
> Symptoms of the virus are related to email and internet connectivity.
> Whether it be not being able to connect to not being able to send or
receive
> attatchments.
>
> To remove the Happy99 virus do the following:
>
> click start go to shutdown and choose restart in msdos mode
> type the following (pressing enter after each line):
>
> cd\
> cd windows\system
> ren wsock32.dll wsock32.old
> ren wsock32.ska wsock32.dll
> del ska.exe
> del ska.dll
> del wsock32.ska
> exit
>
> If you are familiar with the regestry then do the following:
>
> remove ska.exe from the following regestry key:
> HKEY_LOCAL_MACHINE\SOFTWARE\microsoft\windows\current version\RunOnce
>
> If you are not familiar with the regestry don't touch it, it is a very
> sensitive part of the operating system. It may not even be running from
the
> regestry anyway, I haven't seen a case yet where the ska.exe runs from the
> regestry.
>
> If you want to know more about the virus and what it does the visit the
> following web site which describes the virus in more detail......
> http://www.geocities.com/SiliconValley/Heights/3652/ska.htm
> <http://www.geocities.com/SiliconValley/Heights/3652/ska.htm>
>
>
> And whatever you do....... don't pass the virus onto someone else.
> Delete the email immediately without opening it!!
>
>
> Penny Mackay-Sim :-)
> Microsoft Services
> penem@mss.com.au
>
>

Main Index  |  Olympia  |  Arena  |  PBM FAQ  |  Links