Hello Werner Hintze,
On Friday, December 03, 1999, 20:55:47 (GMT +07:00) you told us:
>> Means, Happy99 only active if the program using Winsock32.dll, right.
>> Outlook97/98 use this socket, that's why Outlook97/98 infected by this
>> viruses.
WH> Does this mean that The Bat doesn't use winsock32.dll?
I think The Bat! using it (CMIWW).
But question about The Bat! will infected by this viruses or not, I
don't know, because never tried to run happy99.exe with The Bat!
running.
I have experience in one of my customer, all PC on his LAN infected by
Happy99.exe (they use Outlook97, it was January 99 if I recall
correctly). Because they don't know how to remove it, one of the user
install The Bat! Rel. 1.1x (not remember precisely, they got it from
his friend).
The Bat! running for a week (after that they call on us to remove
happy99.exe from all PCs). Wondering all messages sending by The Bat!
not include Happy99.exe, means Happy99.exe not infected The Bat!
WH>>> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
WH>>> =SKA.EXE
>> Aha, this is new info ! Thanks.
>> But, why the instruction below not mention about delete this registry
>> ?
WH> Don't know. I'm not the author of this instruction... :-))
:-)
--
- syafril -
********************************************************************
Name : Syafril Hermansyah | Company : Duta Integrasi Pratama
Mailto : [EMAIL PROTECTED] | Voice : (62) (21) 385-1600
URL : www.dutaint.co.id | FAX : (62) (21) 351-9241
********************************************************************
I am using The Bat! 1.38 Beta/5 (reg) under
Windows NT Workstation 4.0 built 1381, Service Pack 6
Created : Friday, December 03, 1999, 22:21:38 (GMT + 07:00)
--
--------------------------------------------------------------
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
<mailto:[EMAIL PROTECTED]>
To Unsubscribe from TBUDL, double click here and send the message:
<mailto:[EMAIL PROTECTED]>
--------------------------------------------------------------
