charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Importance: Normal
X-archive-position: 16789
X-listar-version: Listar v0.128a
Sender: ffml-bounce@fanfic.com
Errors-To: ffml-bounce@fanfic.com
X-original-sender: DavidiusBrown@cs.com
Precedence: bulk
X-list: ffml
[The following text is in the "Windows-1252" character set]
[Your display is set for the "US-ASCII" character set]
[Some characters may be displayed incorrectly]
I have had some personal experience with this virus (at work, not this
account). Happy99.exe is a Windows 95/98/ME program that carries the Ska
virus. When you run the program, you get a cutsy display of exploding
fireworks.
But that's not all.
The virus then replaces your winsock.dll file with it's own file, and then
turns around and attaches happy99.exe to every outgoing e-mail that you send
via Outlook, Netscape Communicator and similar e-mail programs (The AOL and
Compuserve programs may be unaffected, but I'm not sure). It may go so far
as go send copies of itself to users in your address book. My guess is that
our innocent contaminator had ffml@fanfic.com in his address book. I know I
do, and I've posted only a couple of times.
Anyway, unless we are dealing with a mutation of the Ska virus, you do not
need to panic. Ska does not destroy your software or data, other than
renaming your winsock.dll file to another name. I believe that the McAfee
web page has detailed instructions on how to purge your computer of this
virus.
David A. Brown