I sent a few emails to people today directly from their webpages, not from opening Outlook Express, and I was shocked to find out that the messages contained happy99.exe on them. How in the hell did that happen??? Does that mean the virus is on my computer??? If it is on my computer what problems should I be experiencing, because currently I can't find anything wrong. What can be done about it? I have put off buying a virus program but I'm afraid this is one of those procrastination issues that is going to bite me is the butt. Any information would be helpful.<p>parkerpt (email paranoid now, so no email provided in this link)<br>99.5 1.8T qms

>Dear Valued Customer,<br>><br>>It has come to our attention that a file named HAPPY99.EXE is being<br>>distributed via email that affects Windows 95, Windows 98, and Windows<br>>NT. If you receive this file, DO NOT CLICK OR RUN IT. Delete it<br>>immediately.<br>><br>>When you click or run HAPPY99.EXE, it installs files and modifies<br>>settings on your Operating System. HAPPY99.EXE then attaches itself to<br>>all emails that you send thus possibly affecting your contacts'<br>>computers.<br>><br>>We searched for what to do in case you have HAPPY99.EXE.<br>><br>>Step One...<br>>Look for the following files (usually in Windows\System):<br>><br>>(1) ska.exe<br>>(2) ska.dll<br>>(3) wsock32.ska<br>><br>>If you don't find it, then your PC is OK. If you find it, proceed to<br>>Step Two.<br>><br>>Step Two...<br>>Delete ska.exe and ska.dll.<br>><br>>Step Three...<br>>Rename wsock32.ska to wsock32.dll. (wsock32.ska is actually your<br>>original wsock32.dll that HAPPY99.EXE renamed.)<br>><br>>Step Four...<br>>Click Start then click Run. Type REGEDIT. This launches the registry<br>>Editor.<br>><br>>Step Five...<br>>In the Registry Editor, click Edit the click Find. Type RunOnce. The<br>>right portion of the Registry Editor is split into Name & Data. Look for<br>>the file named ska.exe under the Name column.<br>><br>>If you do not find this file, then you are OK already. If you do,<br>>proceed to Step Six:<br>><br>>Step Six...<br>>Click on ska.exe then delete all contents of the box named Value Data. Do<br>>not delete the file ska.exe itself as you risk damaging your operating<br>>system.<br>><br>>When you've done all these, you're OK!<p>HTH,<br>Mark K<br>no emails cause I don't want to get it again!!!<p>

Step 2 says to delete ska.exe but step 6 says not to delete ska.exe or I risk damaging my operating system. What gives?<p>parkerpt<br>99.5 1.8T qms

In step two he is telling you to delete the FILE named SKA.EXE.<p>In step 6 he is telling you to keep the REGISTRY ENTRY named SKA.EXE,<p>You are supposed to keep the "Value Name" called SKA.EXE (like a variable name) - but delete the contents of the variable - the "Value Data" (set it to null / blank).<p>Don't bother sending me a thank-you e-mail either ;-)<p>Happy computing,<p>Gordon Martin<br>98.5 2.8QMS (Santorin Blue)<p><br>

I'm by no means a computer expert, but I think it says to delete all the contents inside the box of Value data. This is in the registry. You delete ska.exe in Windows/System directory.<p>I deleted the ska.exe file from my PC, and I never had to go past step 5. I got these directions from a friend, so I can't be held responsible for any damage to your system! Don't get me wrong, my friend is a computer programmer, so I'm sure she knows what she's talking about.

Thanks to Drs. Mark K and Sean G I believe I am now rid of the "worm" known as happy99. If I inadvertently sent this to anyone I am extremely sorry. You can fix by doing what Mark said or go to www.symantic.com and searching for happy99. I also know who sent it to me...he had scanned a picture of my A4 for me and emailed it to me the same day his wife received a bucketload of emails from a newsgroup. Bad luck, I guess. Thanks again and sorry for the stretch to make this A4 related (my picture.)<p>parkerpt<br>99.5 1.8T qms