How to get rid of the Happy99 virus
(last updated on February 24, 1999)

 

If you have already run Happy99.exe, to get rid of it, print out this page and follow the instructions.  I have tried to make it as simple as possible so that even if you are computer illiterate, you can safely clean your system of the virus.  However, please follow these steps carefully and in order.  WARNING - Failure to follow instructions exactly may cause problems in accessing the internet from your computer!  If you want a more detailed explanation of the virus, check out  Happy99 .   For a VERY detailed explanation, including directions in both English and Japanese to disinfect your system, go toTechnical Explanation.

1)   Open your Windows\System folder and find the following files:

        ska (or ska.exe in MS-DOS)

        ska.dll

2)   Delete these files.  If you cannot find them, be sure that you go to "View" on the menu across the
      top of the screen.  Select "options".  Then click on "View all files".  That should allow you to
      see the  files.

3)   Delete all messages in your email program with the Happy99.exe attachment.  Be sure to check
      your trash folder and empty the trash also.

4)   If you have restarted your computer after running the Happy99.exe program, it will have created
      a file called "liste.ska" in the Windows\System folder.  It creates a list of email addresses and
      will mail the virus to those addresses.  You need to delete this file.

5)   When you run the program "Happy99.exe", it renames a file that is critical for your computer
      to access the internet.  The original file name is "Wsock32.dll" and the program changes it
      to "Wsock32.ska".  It creates a modified version and labels it "Wsock32.dll".  You will want
      to erase the new "Wsock32.dll" and rename or copy "Wsock32.ska" to "Wsock32.dll" again.
      Here is how:

        a)   Make SURE all internet related programs are disabled (this includes instant messaging
              services such as ICQ and AOL Instant Message), then restart your computer
              in MS-DOS mode.

        b)   Once it has restarted, you should see "C:\WINDOWS>" on the screen.

        c)   Type in "cd system" and press "enter" or "return".  You should
              see "C:\WINDOWS\SYSTEM>" on the screen.

        d)   Type in "copy wsock32.ska wsock32.dll" and press "enter" or "return".

        e)   When asked if you want to overwrite wsock32.dll, type "y" for yes.
              If you get an error message, try deleting "wsock32.dll" and do step "d" again.

        f)   Type in "exit" and press "enter" or "return".

6)   I suggest that you notify everyone on your email list about the virus since you may have sent
      it to them unknowingly.

That should take care of the Happy99 virus.

(This information was taken from http://members.tripod.com/docsmiley/happy99.htm)