Hello,
The information to remove Happy99.exe are :
=======================================
Removing the worm manually:
1.delete WINDOWS\SYSTEM\SKA.EXE
2.delete WINDOWS\SYSTEM\SKA.DLL
3.in WINDOWS\SYSTEM\ directory, rename WSOCK32.DLL to
WSOCK32.BAK
4.in WINDOWS\SYSTEM\ directory, rename WSOCK32.SKA to
WSOCK32.DLL
5.delete the downloaded file, usually named HAPPY99.EXE
Windows prevents you to do step #3 and #4 above if the machine is
still
connected to the Internet.
The file "windows\system\wsock32.dll" is used whenever the
machine is
connected to Internet (i.e.
through dial-up or LAN connection).
If you are using dial-up connection (i.e. America Online), you
need to do
the following:
1.terminate internet connection
2.delete WINDOWS\SYSTEM\SKA.EXE
3.delete WINDOWS\SYSTEM\SKA.DLL
4.in WINDOWS\SYSTEM\ directory, rename WSOCK32.DLL to
WSOCK32.BAK
5.in WINDOWS\SYSTEM\ directory, rename WSOCK32.SKA to
WSOCK32.DLL
6.delete the downloaded file, usually named HAPPY99.EXE
If you are connected to Internet through LAN (i.e. in the office
or cable
modem), you need
to do the following:
1.From the Start menu, select shutdown-restart in MS DOS mode
2.type CD \windows\system when DOS prompt (C:\)appears
3.type RENAME WSOCK32.DLL WSOCK32.BAK
4.type RENAME WSOCK32.SKA WSOCK32.DLL
5.type DEL SKA.EXE
6.type DEL SKA.DLL
======================================
If you need more info please check :
http://www.symantec.com/avcenter/venc/data/happy99.worm.html
http://www.geocities.com/SiliconValley/Heights/3652/SKA.HTM
If you have not executed the program then you have not been infected. Please please
check your systems this is the second time this virus goes on the list !!
Carole
******************************************
Carole Nasra
list-owner
mailto:[EMAIL PROTECTED]
http://www.netacc.net/~ckn
*********************************
