The following are NAI instructions for removing the Happy99
virus that Sun emailed to the group, today. For additional information, go to http://vil.nai.com/vil/vpe10144.asp
(When is Sun going to stop
willfully spreading viruses to Sun market support groups?)
"Removal
Instructions
Use specified engine and DAT files for detection. Removal requires
manual operation: You will need to reboot to MS-DOS mode as WSOCK32.DLL
cannot be changed under Windows. "SHUTDOWN | RESTART TO MSDOS
MODE" and when at the command prompt, type in these instructions:
CD C:\WINDOWS\SYSTEM
REN WSOCK32.DLL WSOCK32.BAD
REN WSOCK32.SKA
WSOCK32.DLL
DEL SKA.EXE
DEL SKA.DLL
COPY LISTE.SKA C:\
The above is sufficient to stop the worm from working. To restart
Windows, type EXIT. Note that the file LISTE.SKA contains a listing of
persons whom have received the HAPPY99.EXE file unsolicited from you. It
would be good netiquette to inform them of this misdeed and forward them the
removal instructions as well."
|
