virus infection confirmed
"Lucien" (lucien@writeme.com)
Sun, 21 Feb 1999 20:56:59 -0800
if you have recieved an email from me with no message/subject only an
attachement
Happy99.exe that means you were infected by the worm IHappy
its harmless but annoying
persons recieving this message recieved the file happy99.exe
enclosed is a small script that should help you rid your self of this pest
===========================================================================
GO TO MSDOS PROMPT (start button; programs; msdos prompt)
THEN TYPE THE FOLLOWING STEP BY STEP AND PRESS ENTER ( no desrespect
intended)
1) CD \WINDOWS\SYSTEM
2) DEL SKA.EXE
3) DEL SKA.DLL
Answer "Yes" if it asks if you want to overwrite WSOCK32.DLL. Explanation:
WSOCK32.SKA is a backup of the original WSOCK32.DLL made by the virus. You
are replacing the modified DLL with the original.
4) COPY WSOCK32.SKA WSOCK32.DLL
5) DEL WSOCK32.SKA
You can leave WSOCK32.SKA on your system. It is a copy of your original
WSOCK32.DLL
Do not delete WSOCK32.SKA if you are unable to replace WSOCK32.DLL with
WSOCK32.SKA.
Return to Windows by typing
6) EXIT
==========================================================================
this should work
sorry I created so much trouble
Lucien
lucien@writeme.com
www.jol.com.jm/~luciano
icq # 2233317
8769922164