Re:      [PCSOFT] virus
If HAPPY99 has modified your system:
Check to see if the file WSOCK32.SKA exists.
The virus keeps track of its victims and does not send a message to
one address more than one time. Recipients of a copy of Happy99.exe
are listed in a file called LISTE.SKA in the Windows system folder.
Read this file opened in notepad. Re-save it as a text file...
I suggest you warn people on that list to check their systems.
(Clean your system first... grin...)

Then go to START, then SHUT DOWN and select the
RESTART in MS-DOS MODE.
Then you can safely :
1. Delete the files SKA.EXE, SKA.DLL, LISTE.SKA,
    and WSOCK32.DLL from the \Windows\System folder/directory.
2. Rename the file WSOCK32.SKA to WSOCK32.DLL and reboot
    (WSOCK32.SKA is a backup copy of your original WSOCK32.DLL).
3. Be sure to delete the source of the problem, HAPPY99.EXE.

The above is from various WEB sites and Virus protection WEB sites.
MUCH more detailed information is available including step by step
instructions in using the DOS commands used -- (spelled out...)
It also describes a registry hack to check to see if HAPPY99 is
still trying to load itself each time (if LISTE.SKA was empty, for instance.)
I have a 31K copy of a WEB page from 2/99. If anyone else wants it
write OFF LIST  with REQUEST in the subject line.  (I sent one to Paul).
                            Rick

----- Original Message -----
From: "Paul Tiwana" <[log in to unmask]>
> PC-Cillin showed six files in my my friend's computer affected with the virus.
> 1. Happy99.exe
> 2. Line.gif
> 3. SKA.vir
> 4. SKA.dll
> 5. SKA.exe
> 6. wsock32.dll
> I  deleted  first five of them as I knew they were not important.
> I m reluctant to delete wsock32.dll . I m afraid it may not affect the working of the computer if it is deleted.
> Please advise

      "Hold No Punches.." Rode brings you great shareware/freeware
        programs with his honest opinions in this weekly column.
                         http://nospin.com/rode