UBBFriend: Email This Page to Someone! |
George Spellwin's ELITE FITNESS Discussion Boards
Anabolic Discussion Board off topic- happy virus
|
Author | Topic: off topic- happy virus |
macrophage69alpha Pro Bodybuilder (Total posts: 774) |
posted March 03, 2000 06:08 PM
I just recieved an E mail that was piggybacked to another from the sender- it was all code- except at the top where it said happy.exe is this the "happy" virus i think that it did not work because I accesed it on Hushmail and their server has some interesting security measures. anyways if anyone has any info I appreciate it. BTW- texas guns it was piggybacked on your E mail- did you send it directly or did you use the built in mail feature on the board? ------------------ [This message has been edited by macrophage69alpha (edited March 03, 2000).] IP: Logged |
DRRman Amateur Bodybuilder (Total posts: 8) |
posted March 03, 2000 06:53 PM
hey man, that virus is not malicious, and he probably didn't send it, it just automatically forwarded itself to the people in his address book, i would delete the file, and run a good virus scan on the computer you are on. IP: Logged |
quenepo Pro Bodybuilder (Total posts: 239) |
posted March 03, 2000 07:06 PM
I recived that virus, thank god I have norton.
IP: Logged |
dogboy Amateur Bodybuilder (Total posts: 70) |
posted March 03, 2000 07:42 PM
It is pretty harmless. It did not infect you unless you used the file. It e-mails itself to everyone on your contact list. Any updated virus software gets rid of it with ease. Be suspicious of any *.exe file sent through e-mail. Lots of trojans and stuff like that... IP: Logged |
E2 Pro Bodybuilder (Total posts: 1224) |
posted March 03, 2000 07:47 PM
Yeah mac she accidentally sent it to me to, i mailed her about it. A few people on the board have it.
IP: Logged |
WCP Pro Bodybuilder (Total posts: 273) |
posted March 04, 2000 03:04 AM
The happy.exe virus in not a auto forward type of virus, if there is one like that its news to me. Its a typical worm virus that attaches to memory and dicks mainly with word and office documents i.e speadsheets, databases..etc. Someone I may or may not know likes to fiddle with writing these little ditties for shits and giggles, and is very familear with this virus. It often come accustomed with a cute fireworks display and sometimes dont. Again it is not like the Melissa virus to the best of my knowledge and self forwarding, but will attach itself to mail sent out, and "piggy back" A good clean sweep with an updated anti virus application should take care of it. If not sweep your system registery and see if you can clear it from there. Its nothing killer but a pain in the ass no less, ha,ha....nothing compared to Raid though... Later Bros. ------------------ IP: Logged |
dogboy Amateur Bodybuilder (Total posts: 70) |
posted March 04, 2000 03:55 PM
I encountered the Happy99.exe IP: Logged |
Rock_Man Pro Bodybuilder (Total posts: 321) |
posted March 08, 2000 03:01 PM
This is a worm program, NOT a virus. This program has reportedly been received through email spamming and USENET newsgroup posting. The file is usually named HAPPY99.EXE in the email or article attachment. When being executed, the program also opens a window entitled "Happy New Year 1999 !!" showing a firework display to disguise its other actions. The program copies itself as SKA.EXE and extracts a DLL that it carries as SKA.DLL into WINDOWS\SYSTEM directory. It also modifies WSOCK32.DLL in WINDOWS\SYSTEM directory and copies the original WSOCK32.DLL into WSOCK32.SKA. WSOCK32.DLL handles internet-connectivity in Windows 95 and 98. The modification to WSOCK32.DLL allows the worm routine to be triggered when a connect or send activity is detected. When such online activity occurs, the modified code loads the worm's SKA.DLL. This SKA.DLL creates a new email or a new article with UUENCODED HAPPY99.EXE inserted into the email or article. It then sends this email or posts this article. If WSOCK32.DLL is in use when the worm tries to modify it (i.e. a user is online), the worm adds a registry entry:
The registry entry loads the worm the next time Windows start. Removing the Worm Manually
------------------ IP: Logged |
Capt'n_Crunch Amateur Bodybuilder (Total posts: 18) |
posted March 08, 2000 06:24 PM
Its just a worm that replicates itself. When you open the file you see a fireworks display, meanwhile it alters your winsock32.dll file. Then each time you initiate your email or newsgroup, it spams the newsgroup or email recipient with copies of itself. It wont hurt data on your comp, its more of a nuisance for networks and their administrators. It can slow down networks and crash email servers so its not really too terrible on you, jus inoculate it, delete it, or fix it if your already infected. If you didnt see that fireworks display, I wouldnt worry about it, jus run scan. IP: Logged |
big_bad_buff Pro Bodybuilder (Total posts: 241) |
posted March 08, 2000 06:56 PM
could be a trojan!. you can send it through email, or icq, about 255k long. hides itself in startup, and the reg. you can name it anything you want, but must have the ( .exe ) at the end. i'v played around with it before, pretty mean. can be very dangrous if the sender has your current ip address. if your keyboard starts screwing up, and the IP: Logged |
phiend Pro Bodybuilder (Total posts: 316) |
posted March 08, 2000 08:24 PM
I just got an e-mail from a user on this board with an attachment of a steroid profile list, but it was accompanied by a virus, so I had to delete it. IP: Logged |
scourge1 Pro Bodybuilder (Total posts: 105) |
posted March 08, 2000 09:43 PM
Might have been the happy99 virus. If you're e-mail account isn't using Outlook or Outlook Express with macros enabled you'll be safe. It's a relatively harmless virus that uses Word macros embedded in Outlook to access your contact list and e-mail itself to everyone on it. When have questions about virii or possible hoaxes just check out http://www.nai.com and look over their hoax and virii lists. IP: Logged |
Capt'n_Crunch Amateur Bodybuilder (Total posts: 18) |
posted March 08, 2000 11:12 PM
Just to let you guys know, that virus that was on the gear profile list was not the Happy.exe worm. It was a W97Macro/class virus and is easily taken care of if you got norton or any other descent antivirus program. I recieved it today and inocculated it. If you dont know how to do it or jus too lazy email me and Ill send a clean copy in word format. IP: Logged |
BIGBADFKR Amateur Bodybuilder (Total posts: 36) |
posted March 09, 2000 12:06 AM
I also encountered the Happy99.exe IP: Logged |
All times are ET (US) | |
Powered by:
Ultimate Bulletin Board (UltimateBB), Version 5.42a
� Infopop Corporation (formerly Madrona Park, Inc.), 1998-1999.