Fw: Cactus TurboNet Warning - The Happy99.exe worm

["John and Laurie Danahy" <JDANAHY@turbonet.com>]

John and Laurie Danahy
jdanahy@turbonet.com
-----Original Message-----
From: Tony Ray <tony@turbonet.com>
To: everyone@turbonet.com <everyone@turbonet.com>
Date: Wednesday, March 10, 1999 12:47 PM
Subject: Cactus TurboNet Warning - The Happy99.exe worm


>
>Someone has invented something new to make life miserable - the Happy99.exe
>worm.  If you receive an attachment to an email or newsgroup posting with
>the name Happy99.exe, DO NOT run the attached file.  When run it just opens
>a window and displays some fireworks - or so it would appear.  What it is
>actually doing is modifying a file on your computer (winsock32.dll) so that
>anytime you send an email or newsgroup posting, the Happy99.exe is
>automatically attached to the message without your knowing it.
>
>This worm only effects Windows 95 and 98.
>
>So how do you tell if your computer has been infected?  The best way is to
>send an email to yourself.  If the email message comes back with the file
>Happy99.exe attached, then your computer has been infected by the worm.  If
>there is no attachment, you have nothing to worry about.
>
>--Tony
>