Re: virus

[Bill Moore <bmoore@redfish.fsr.com>]

Ron and others,

Thanks for addressing the recent virus problem.
Enclosed is the text FSI sends its subscribers who
have acquired the happy99.exe virus.  The virus is
(apparently) not harmful beyond wasting bandwidth.

When dealing with software, as with all things in
life, one should never consume anything whose
origins you are not familiar with or confident of.

=============================================
Bill Moore 		bmoore@fsr.com
System Administrator    First Step Research
(208) 882-8869		Moscow, Idaho   83843
=============================================

   Dealing With happy99.exe
   =-=-=-=-=-=-=-=-=-=-=-=-=

1) If you have not already done so since running the
   Happy99 program, restart your computer.

2) *OPTIONAL* Delete all messages in your email
   program with the Happy99.exe attachment.

3) Make SURE all internet related programs are
   disabled (this includes instant messaging services
   such as ICQ and AOL Instant Message), then restart
   your computer in MS-DOS mode (Click on the Start
   button, select "shut down", then select "restart
   the computer in MS-DOS mode").

4) Once it has restarted, you should see
   "C:\WINDOWS>" on the screen.

5) Type in "cd system" and press "enter" or "return".
   You should see "C:\WINDOWS\SYSTEM>" on the screen.
   If that doesn't get you there, try "cd
   c:\windows\system" or "cd windows\system".

6) Type in "attrib -r wsock32.dll" and press "enter"
   or "return".

7) Type in "copy wsock32.ska wsock32.dll" and press
   "enter" or "return".

8) When asked if you want to overwrite wsock32.dll,
   type "y" for yes. If you get an error message,
   type "del wsock32.dll" , press "enter" or "return"
   and do step 7 again.

9) Type "del ska.dll", press "enter" or "return".

10) Type "del ska.exe", press "enter" or "return".

11) Type "del liste.ska", press "enter" or "return".

12) *OPTIONAL* If you have followed all of the steps
   correctly, you may delete "wsock32.ska" safely
   (Type "del wsock32.ska" and "enter" or "return").
   I would suggest renaming it so that you can keep
   it without it being detected by an antivirus
   program.  To rename it type "ren wsock32.ska
   wsock32.old", then "enter" or "return".

13) Type in "exit" and press "enter" or "return".

14) I suggest that you notify everyone on your email
   list about the virus since you may have sent it to
   them unknowingly.
  

That should take care of the Happy99 virus.  HOWEVER - unless you are
running antivirus software with an updated data file, you
could easily catch this virus again or another one.  If you already have
the software, you should update your data files at least monthly. 
If you do not have antivirus software, I suggest that you go to
www.mcafee.com and download the FREE evaluation version of their
software.  Be sure to also download all updated data files, including the
one for the Happy99 virus.  Just follow the instructions to install
and update the program.  You can contact their customer service if you have
problems with this.  McAfee's program is considered to be
one of the best.  And the updates are free!  Just be sure that you use SOME
program.  Surfing the internet without antivirus software is
like having sex without protection.  The next virus you catch might be
deadly to your computer.