Removal
- To: pumpkins@mallorn.com
- Subject: Removal
- From: W* V* I*
- Date: Thu, 12 Aug 1999 20:49:21 -0400 (EDT)
Group:
HAPPY99.exe Virus Removal
What is HAPPY99?
HAPPY99 is a little program that launches several files that watch
who you email and
then keeps track in a file and then sends them a second message
with the HAPPY99.EXE
file attached. If the recipient opens and executes it, then it
starts for them too. If you
receive an attachment from ANYONE that says anything like HAPPY99,
don't click or
open it ...simply erase or delete it and you will be fine. Even
friends and people you know
well could send it to you because they have been infected with it
and they don't realize
it. If you did look at it or opened it, follow the instructions
below to remove it.
How to remove Happy99.exe Virus
YOU CAN REMOVE THIS MANUALLY FROM YOUR COMPUTER. To do that, first
check the
C:\WINDOWS\SYSTEM folder for the presence of these 3 files.
1. SKA.EXE
2. SKA.DLL
3. WSOCK32.SKA
If you find these files, then you have been attacked by the Happy99
Trojan. To remove
this trojan you will have to do the following:
Make sure that you have WSOCK32.SKA file before deleting
WSOCK32.DLL and ensure
that you have renamed this file properly. You may have to close
your Browser, Email
software, etc. to delete and rename the DLL files.
Follow the instructions below...
1. Shut down windows with the RESTART IN DOS MODE option.
2. At the prompt type the bold text.
C:\WINDOWS>cd system
3. Next prompt and command:
C:\WINDOWS\SYSTEM>del wsock32.dll
4. And finally:
C:\WINDOWS\SYSTEM>ren wsock32.ska wsock32.dll
Then restart your computer. You should now be rid of HAPPY99. :-)
---------------------------------------------------------------------
To sign-off this list, send email to majordomo@mallorn.com with the
message text UNSUBSCRIBE PUMPKINS
