Re: [gundam] Mobile suit mechanics


A Long Time Ago, In A Galaxy, Far, Far Away.... (devillin@juno.com)
Fri, 12 Mar 1999 16:25:25 -0500


On Fri, 12 Mar 1999 22:26:22 +0800 (PST) Doc <figureight@pacific.net.ph>
writes:
>begin 644 Happy99.exe

--------- Forwarded message ----------
From: -Z- <Z@gundam.com>
Date: Sun, 14 Feb 1999 12:14:29 -0800

I just received a Trojan horse/worm program via e-mail from another
member
of this list and it may also strike others on this list. If you receive
an
e-mail containing the executable HAPPY99.EXE as an attachment and
"X-Spanska: Yes" in the header, delete it immediately and do NOT run the
executable.

If you have run Happy99, you're system is now infected and you'll be
sending the worm to anyone you subsequently e-mail. This worm modifies
WSOCK32.DLL to send itself as an attachment when a posting is made to
USENET or MAIL. Every time you send e-mail to someone, Happy99 is sent
to
them in a separate message. Messages generated by Happy99 have
"X-Spanska:
Yes" in the header. Anyone who runs the attached HAPPY99.EXE executable
becomes infected and perpetuates the worm.

To "cure" this thing, delete SKA.EXE and SKA.DLL from the \Windows\System
folder and replace WSOCK32.DLL with WSOCK32.SKA, also in the
\Windows\System folder.

-Z-

___________________________________________________________________
You don't need to buy Internet access to use free Internet e-mail.
Get completely free e-mail from Juno at http://www.juno.com/getjuno.html
or call Juno at (800) 654-JUNO [654-5866]
-
Gundam Mailing List Archives are available at http://gundam.aeug.org/



This archive was generated by hypermail 2.0b3 on Sat Mar 13 1999 - 06:31:48 JST