| Die Happy99-virus [boodskap #20951] |
Thu, 11 February 1999 00:00  |
Jean-Pierre Botha
Boodskappe: 85
Geregistreer: January 1996
Karma: 0
|
Volle Lid |
|
|
Ja, ons het hom ook op die nuusgroep. Ek het hom nounet in een van die
antwoorde op die 'Pronografie'-storie gekry. Dis gelukkig maklik om van
hom ontslae te raak. Soek die twee *.ska lêers. Vee winsock.dll uit en
herbenaam die winsock.ska terug na 'n dll. Vee liste.ska ook uit.
As dit nie sin maak nie, vra 'n vriend wat meer van rekenaars weet om
onderstaande te lees en jou te help.
Please see: http://www.zdnet.com/zdnn/stories/news/0,4586,2195075,00.htm l
This is scary. It's happening now -- it's happened to me.
Happy99.exe worm spreads on Net
Worm is in the wild in Europe -- expected to hit North America soon.
By Bob Sullivan, MSNBC
A computer worm called Happy99.exe is making its way around the Internet,
sending hundreds of copies of itself via e-mail attachments and newsgroup
postings.
According to Helsinki, Finland, data security firm Data Fellows Inc., the
worm is currently in the wild in Europe and will likely spread very
quickly
to North America. It does not attempt to destroy files on infected
machines, but it sends e-mails and newsgroup postings without the
victim's
knowledge and could cause network slowdowns or even crash corporate e-
mail
servers.
The worm, so-called because it can replicate on its own, first surfaced a
little over a week ago, and since then, hundreds of newsgroup posters
have
complained about the annoyance.
Like most computer pests, it arrives as an e-mail or newsgroup attachment
and infects only users who run the attachment.
Once they do, all victims see is a window with a fireworks display. But
behind the scenes, the worm alters the host computer's winsock32.dll
file,
the computer's doorway to the Internet. Then, each time a user intiates
e-mail or newsgroup activity, by either receiving or sending e-mail or
posting to a newsgroup, Happy99 spams the newsgroup or e-mail recipient
with copies of itself. Any type of activity on port 25 or 119 will
trigger
spam activity, according to Dan Takata, senior software support engineer
of
Data Fellows.
It also keeps a list of the spammed e-mail addresses and newsgroups in a
separate file called LISTE.SKA.
Patch available
Because the original version of winsock32.dll is preserved in backup form
as WSOCK32.SKA, newsgroup posters say they've been able to restore their
machines without much difficulty. Data Fellows has a patch that
recognizes
the worm.
It poses no risk to data, but can be more than a nuisance to network
administrators.
"If you have 100 PCs and everyone is checking e-mail at 9 a.m. and this
thing starts flying around, absolutely it can slow down a network,"
Takata
said. "It can crash your e-mail server. I wouldn't be surprised if it
did."
Because the e-mail header contains "MOUT-MOUT Hybrid (c) Spanska 1999."
Takata speculated that the Happy99 author also wrote a series of viruses
known as the spanska viruses (click here for a description). Those were
first reported in September 1997 and randomly displayed political
messages,
such as, "Remember those who died for Madrid."
Groetnis
___
JlR
Bfn.
|
|
|
|
| Re: Die Happy99-virus [boodskap #20996 is 'n antwoord op boodskap #20951] |
Fri, 12 February 1999 00:00  |
Jean-Pierre Botha
Boodskappe: 85
Geregistreer: January 1996
Karma: 0
|
Volle Lid |
|
|
In skrywe , het hag...@caiw.nl die
volgende te sê gehad:
> van een Amerikaanse vriend die dus mogelijk ook besmet is. Nu heeft die
> vriend geen Windows, maar een Mac. Ik vermoed dat dit virus bij hem geen
> voet tussen de deur krijgt. Moet ik hem toch waarschuwen of is dit een
> Windows-specifiek virus?
>
Windows-spesifiek. Macs het nie iets soos wsock32.dll nie, dus behoort
Happy geen effek op 'n Mac te hê nie.
Groetnis
Johan le Riche
___
JlR
Bfn.
|
|
|
|
| Re: Die Happy99-virus [boodskap #21083 is 'n antwoord op boodskap #20951] |
Sun, 14 February 1999 00:00 |
Alwyn Van Rooyen
Boodskappe: 49
Geregistreer: January 1999
Karma: 0
|
Volle Lid |
|
|
Hoe maak mens die virus dood?
JLR wrote in message ...
> In skrywe , het hag...@caiw.nl die
> volgende te sê gehad:
>> van een Amerikaanse vriend die dus mogelijk ook besmet is. Nu heeft die
>> vriend geen Windows, maar een Mac. Ik vermoed dat dit virus bij hem geen
>> voet tussen de deur krijgt. Moet ik hem toch waarschuwen of is dit een
>> Windows-specifiek virus?
>>
> Windows-spesifiek. Macs het nie iets soos wsock32.dll nie, dus behoort
> Happy geen effek op 'n Mac te hê nie.
>
> Groetnis
> Johan le Riche
> ___
> JlR
> Bfn.
|
|
|
|
| Re: Die Happy99-virus [boodskap #21125 is 'n antwoord op boodskap #20951] |
Mon, 15 February 1999 00:00 |
Jean-Pierre Botha
Boodskappe: 85
Geregistreer: January 1996
Karma: 0
|
Volle Lid |
|
|
In skrywe , het pan...@iafrica.com die
volgende te sê gehad:
> Hoe maak mens die virus dood?
>
Oorspronklike pos het breedvoerige instruksies gehad. Ingeval jou
bedienaar dit verloor het:
Gaan na jou Windows\System directory. Vee ska.exe en ska.dll uit. Kyk of
daar 'n lêer winsock.ska of wsock32.ska is. Indien wel, vee wsock32.dll
uit en herbenaam wsock32.ska na wsock32.dll. Gebruik die Find-funksie op
die Start-menu om te soek vir liste.ska. Indien teenwoordig, vee uit.
--
___
JlR
Bfn.
|
|
|
|
] 
Supertaal
Blog
Soek
Hulp
Lede
Registreer
Teken aan
Tuis
