[GRRN] ADMIN: Happy.exe

Shay Mitchell (shay@earthsystems.org)
Fri, 12 Feb 1999 09:14:46 -0500


Folks,

As was mentioned yesterday, what is called a worm is being spread through
e-mail. It's sort of like a virus and comes in the form of an attachment called Happy.exe.
If should receive this attachment DO NOT OPEN it and DO NOT
EXECUTE it. The only way it can do you any harm is if you open or
execute it. If it's too late and you already did open or execute it,
follow these steps very carefully or you will pass on the worm to other
folks unknowingly:

1) Delete any file called Happy.exe or Happy(some #).exe
2) Go to your windows\system directory and delete the file called ska.exe
3) If you are using Windows 95 or Windows 98 reboot your machine in DOS
mode. You can do this by going to the Start Menu and choosing shutdown and
then choosing Restart in DOS mode.
4) When you are at the DOS prompt type attrib -h -r -s ska.dll and then hit enter.
5) Then type del ska.dll and hit enter.
6) Then type dir wsock* and hit enter.
7) If you see a file called wsock32.ska then continue through these instructions if not skip
to # 10
8) Type del wsock32.dll and hit enter.
9) Type move wsock32.ska wsock32.dll and hit enter
10) Reboot your computer to Windows 95 or Windows 98.
11) Empty your Recycling Bin.

If you have opened the Happy.exe you are now spreading it to others unknowingly through
e-mail, please follow the steps above to eradicate it.

If you have any questions, feel free to write to me and I will try to help
you out.

Take care,

Shay Mitchell
List Manager
shay@earthsystems.org