sureshr@??? said:
> Happy99 is a notable example of this. I remember a time when anything
> with '***** 644 *******.***' was filter fodder out here ... it still
> is ;)
section above modified, since the original came back with:-
postmaster@someplace-changed-to-protect-the-near-innocent said:
> This is an automated response to an email message you recently sent.
> It appears that your PC may be infected with the HAPPY99.EXE trojan
> worm (ie a sort of virus) as our system has detected an apparently
> infected email from you addressed to a user here at Kew. We will
> destroy the messages if they contained only HAPPY99.EXE and attempt to
> deliver any useful message parts.
> Not to be confused with the many computer computer virus myths (http://
> www.kumite.com/myths) HAPPY99.EXE is a trojan worm - ie an apparently
> innocent program (the "trojan"; in this case it displays fireworks on
> your screen when run the first time) with a self replicating payload
> program which travels between machines (the "worm").
> See http://www.datafellows.com/v-descs/ska.htm
> for a description and anti-virus measures which I strongly suggest you
> read. You should be able to work out who else may have received a copy
> from you and you may even be able to work outt who sent it to you in
> the first place. You may care to pass on these tips to them.
> The removal instructions are:
> "In order to successfully remove the Happy99 Worm from your computer
> boot
> from a clean write protected startup diskette and delete the files
> SKA.EXE, SKA.DLL, LISTE.SKA, and WSOCK32.DLL from the
> \Windows\System directory. Then rename the file WSOCK32.SKA to
> WSOCK32.DLL and reboot (WSOCK32.SKA is a backup copy of your original
>
> WSOCK32.DLL). If you haven't already done so be sure to delete the
> original HAPPY99.EXE."
> Sorry its bad news, we hope this helps.
Nigel.
--
[ - Opinions expressed are personal and may not be shared by VData - ]
[ Nigel Metheringham Nigel.Metheringham@??? ]
[ Phone: +44 1423 850000 Fax +44 1423 858866 ]
