[T3] Happy99.exe-LAST POST

[Carl Van Tonder <vtondc@RANDREF.CO.ZA>]

For those of you that did not activate the program oç Duccessfully
removed it please ignore this post. 
For those that are still infected here is the procedure to remove it
completely.
My apologies for the non T3 content but I don't want to accidentally be
forwarded this worm again

Ps. it is a worm and not a virus thus it will not irreparably damage your PC

Thanx

Carl van Tonder

>
Removal
Steps marked optional are not absolutely necessary and are absolutely safe
to skip.

Click Start, then Shut Down, then "Restart Computer in MS-DOS mode", then
click Yes. 
At the DOS prompt type this exactly and press enter at the end of each line:

CD \WINDOWS\SYSTEM

If your Windows folder is not called WINDOWS then substitute the name of
your Windows folder instead, for example: 
CD \WIN95\SYSTEM

Delete SKA.EXE and, SKA.DLL by typing 
DEL SKA.EXE
DEL SKA.DLL
If you get "File not found" you're either not infected or in the wrong
directory. Make sure you're in your Windows System directory; check to see
if you followed step 2 exactly. 

Copy WSOCK32.SKA to WSOCK32.DLL by typing 
COPY WSOCK32.SKA WSOCK32.DLL

Answer "Yes" if it asks if you want to overwrite WSOCK32.DLL. Explanation:
WSOCK32.SKA is a backup of the original WSOCK32.DLL made by the virus. You
are replacing the modified DLL with the original. 

Optional Delete WSOCK32.SKA by typing 
DEL WSOCK32.SKA

You can leave WSOCK32.SKA on your system. It is a copy of your original
WSOCK32.DLL 
Return to Windows by typing 
EXIT

Optional Click Start, then Run, then type regedit in the text box, then
click OK. Click HKEY_LOCAL_MACHINE, then Software, then Microsoft, then
Windows, then CurrentVersion. Under RunOnce check for SKA.EXE and select it
if it is there. Press delete and then click Yes. Close Regedit. Don't change
anything else without making a backup of the registry first. If you don't
find SKA.EXE in the registry, it doesn't mean you're not infected. SKA.EXE
is only added to the registry if HAPPY99.EXE is unable to modify WSOCK32.DLL
when you run it.  

Optional Choose Start, Programs, Accessories, Notepad, choo–Sƒ then
Open then type C:\WINDOWS\SYSTEM\LISTE.SKA in the File Name box. Warn the
people on the list, then delete LISTE.SKA
>


-------------------------------------------------------------------
Unsubscribe? mailto:type3-request@vwtype3.org, Subject: unsubscribe