Bruce A. Frank wrote:

             Name: Happy99.exe
   Part 1.1       Type: unspecified type (application/octet-stream)
              Encoding: x-uuencode

BTW GUYS IF YOU SEE THIS IN YOUR COMPUTER DON'T CLICK
ON IT. IT IS A VIRUS AND IT SENDS ITSELF OUT THE NEXT TIME YOU
SEND A MESSAGE. I HAVE GOTTEN SEVERAL BUT IT DON'T WORK
IN LINUX! IT DOES WORK IN WINDOWS HOWEVER.

JUST DELETE IT WITHOT CLICKING ON IT AND IT WILL BE OK.

I got this information from Corky Scott at Dartmouth.

Here's the blurb our anti virus folks have on an electronic bulletin,  Corky

VIRUS NAME:  Happy99.exe

PLATFORM:  Windows

INFECTION METHOD:  Usually received by e-mail as an attachment.

SYMPTOMS:  If you start the program, a window entitled "Happy New Year 1999
!!" opens and shows a firework display.

WHAT IS DOES TO YOUR COMPUTER:  Happy99 is a worm - not a virus.  It copies
itself as SKA.EXE and extracts a DLL that it carries as SKA.DLL into
WINDOWS\SYSTEM directory. It also modifies WSOCK32.DLL in WINDOWS\SYSTEM
directory and copies the original WSOCK32.DLL into WSOCK32.SKA.  When you
create a new email the worm is inserted into the email and sent along with
the message to infect another computer.
The registry entry loads the worm the next time Windows starts.

HOW TO GET RID OF IT:  See
http://www.symantec.com/avcenter/venc/data/happy99.worm.html for
step-by-step instructions.

Bruce A. Frank

The Aircraft Rotary Engine Newsletter.              Powered by Linux.

http://home.earthlink.net/~rotaryeng/            http://www.linux.org