Virus Warnings

[Guest guest]

Jaya Jaya Jagannath

Dear Friends,

I sincerely apologize for the virus that could have infected your

computer. This came sometime earlier with a greeting card and I thought it

was a greeting card!!!. Please print this instruction and do exactly as

suggested. Thank you Veikko I got both the Virus....Man & machine.

 

With Regards,

Sanjay Rath

----------------

 

---------- Forwarded Message ----------

 

Letter PRONTO:268566 (74 lines)

Internet: Veikko Niemi <veikko.niemi

25-Mar-99 15:21 +0530

gjlist

Bcc: SRath [2754]

RE: Virus Warnings

---------------------------

At 23:15 24.3.1999 EST, you wrote:

>I received the Happy 99 message, but when I opened it, it was a picture of

>fireworks going off (very pretty) but there was no problem (yet). Thanks

for

>the warnings.

>

>

Happy99 is a tedious worm, not a malicious virus and cannot be

cleaned by anti-viral progs. The cleanup is manual but simple and the

best procedure is given in the Symantec site

 

http://www.symantec.com/avcenter/venc/data/happy99.worm.html

..

I give below a summary of the procedure (needless to add I have been a

victim along with several of my friends and relations up and down the

msg chain).

 

Happy un-happying

 

Please check if you have the following files in your windows\system

directory

 

ska.exe

ska.dll

wsock32.ska

liste.ska

 

presence of any of these means it is time to do the following

 

delete all instances of happy99.exe from mail.

Delete ska.exe in the windows\system

delete ska.dll in the windows\system

 

Do not delete the others yet, but reboot in dos-mode

(this is very important)

 

go to the windows\system directory - cd c:\windows\system

or wherever you keep your windows

 

del wsock32.dll

ren wsock32.ska wsock32.dll

 

(this is to revert to the correct mode of the wsock.dll, as happy promptly

renames the real wsock32.dll to the wsock32.ska and puts in its own version

of wsock.dll. The wsock32.ska is the original clean version and is needed

to

send out clean mail again. Do NOT try to delete wsock32.dll from within

windows and before you have deleted the ska.exe )

 

Finally "Find" the file liste.ska and open with notepad, where all those

who

got the happy99.exe from you will be listed for your apology letters.

 

The above will be needed if you clicked on the happy99.exe attachment

when a small black screen comes up with a few colourful but small fireworks

going on.

 

Whilst you watch the fireworks on the screen, it chnges your system files

as corrected above so that whenever you send out a msg, you

unwitiingly send out a blank msg with the happy99.exe attached to it. The

unsuspecting receiver thinking it is a genuine file from you will run the

program and get infected too.

 

It does not damage your system but keeps filling up your hard drive with

itself in blank msgs.

 

-

Sincerely,

Veikko Niemi

358-9-590697 (MediaRing)

Ansatie 18 A 7

02940 Espoo

Finland

http://come.to/webwhore

<veikko.niemi

(Text PRONTO:268566) ------

 

------

eGroup home: http://www.eGroups.com/list/sjvc

Free Web-based e-mail groups by eGroups.com