How to get
rid of the Happy99 virus
(last updated on February 24, 1999)
If you have already run Happy99.exe, to get rid of it, print out this page and follow the instructions. I have tried to make it as simple as possible so that even if you are computer illiterate, you can safely clean your system of the virus. However, please follow these steps carefully and in order. WARNING - Failure to follow instructions exactly may cause problems in accessing the internet from your computer! If you want a more detailed explanation of the virus, check out Happy99 . For a VERY detailed explanation, including directions in both English and Japanese to disinfect your system, go toTechnical Explanation.
1) Open your Windows\System folder and find the following files:
ska (or ska.exe in MS-DOS)
ska.dll
2) Delete these
files. If you cannot find them, be sure that you go to
"View" on the menu across the
top
of the screen. Select "options". Then click
on "View all files". That should allow you to
see
the files.
3) Delete all
messages in your email program with the Happy99.exe
attachment. Be sure to check
your trash folder and empty the trash also.
4) If you have
restarted your computer after running the Happy99.exe program, it
will have created
a
file called "liste.ska" in the Windows\System
folder. It creates a list of email addresses and
will mail the virus to those addresses. You need to delete
this file.
5) When you run the
program "Happy99.exe", it renames a file that is
critical for your computer
to
access the internet. The original file name is
"Wsock32.dll" and the program changes it
to
"Wsock32.ska". It creates a modified version and
labels it "Wsock32.dll". You will want
to
erase the new "Wsock32.dll" and rename or copy
"Wsock32.ska" to "Wsock32.dll" again.
Here is how:
a) Make SURE all internet related programs are
disabled (this includes instant messaging
services such as ICQ and AOL Instant Message), then restart your
computer
in MS-DOS mode.
b) Once it has restarted, you should see "C:\WINDOWS>" on the screen.
c) Type in "cd system" and press
"enter" or "return". You should
see "C:\WINDOWS\SYSTEM>" on the screen.
d) Type in "copy wsock32.ska wsock32.dll" and press "enter" or "return".
e) When asked if you want to overwrite wsock32.dll,
type "y" for yes.
If you get an error message, try deleting "wsock32.dll"
and do step "d" again.
f) Type in "exit" and press "enter" or "return".
6) I suggest that
you notify everyone on your email list about the virus since you
may have sent
it
to them unknowingly.
That should take care of the Happy99 virus.
(This information was taken from http://members.tripod.com/docsmiley/happy99.htm)