[plug] Happy99, was LS-120 drives at UWA

[Shackleton, Kevin]

(this is a little off-topic as far as Linux is concerned)

BTW, anyone got a good analysis of Happy99?

I read that it (rather generously I thought) renamed the wsock32.dll and
replaced it with its version that sends the phantom extra emails.  To remove
Happy99 you only had to delete winsock32.dll and rename the original back.
Unfortunately that didn't work.  This system I looked at had other issues
too so I killed all Windows and re-installed, as one does in the world of
the Evil Empire.

My query here is not "how do you run Windows properly", which obviously you
can't, but why would a virus make itself so easily removed?

K.

> ----------
> From: 	GB[SMTP:gb at perthpcug.org.au]
> Reply To: 	plug at linux.org.au
> Sent: 	Thursday, 27 May 1999 2:12
> To: 	plug at linux.org.au
> Subject: 	Re: [plug] Re: LS-120 drives at UWA
> 
> WARNING!!
> 
> Your post was followed by another containing the Happy99 virus!!
> 
> Don't open this file!!
> 
> WARNING!!
> 
> Regards,
> 
> Garry.
> 
> 
> 
> Rob Potter wrote:
> 
> > Re LS120 drives...
> >
> > How do you get linux to recognise them?  I have an internal LS120 which
> > works fine under W98, but when I've tried to mount it under RH5.2 I
> can't
> > seem to get it to work.  Is there something I need to define in the file
> > system type?
> >
> > PS.  If you want SO51on an LS120 I can do you one - but I'm at Murdoch
> not
> > UWA!
> >
> > Rob
> > Dr Rob Potter
> > WA State Ag Biotech Centre
> > Murdoch University
> > Perth, WA 6150
> > Australia
> > Ph: +618 93602920  Fax: +618 93606303
> > Internet: potter at central.murdoch.edu.au;  Compuserve: 100113,1537
>