The Happy99 virus/worm/trojan is attached to newsgroup and e-mail messages as an attachment called Happy99.exe. You cannot get infected with this virus just by reading a newsgroup or e-mail message. You have to execute the attachment. Almost always, the person who sent it does not know that they are sending it out. It does not show up in their Sent box. If you didn't execute the attachment, you can just delete it and move on. If you execute an infected attachment, it will display a firework display. This virus does not affect Macs, DOS, Windows 3.x, OS/2, Linux or WebTV.

To remove this virus, follow instructions EXACTLY.

(1) If you have not already done so since running the Happy99 program, restart your computer.

(2) Delete all messages in your email program with the Happy99.exe attachment.

(3) Make SURE all internet related programs are disabled (this includes instant messaging services such as ICQ and AOL Instant Message), then restart your computer in MS-DOS mode (Click on the Start button, select "shut down", then select "restart the computer in MS-DOS mode").

(4) Once it has restarted, you should see "C:\WINDOWS>" on the screen.

(5) Type in "cd system" and press "enter" or "return". You should see "C:\WINDOWS\SYSTEM>" on the screen. If that doesn't get you there, try "cd c:\windows\system" or "cd windows\system".

(6) Type in "attrib -r wsock32.dll" and press "enter" or "return".

(7) Type in "copy wsock32.ska wsock32.dll" and press "enter" or "return".

(8) When asked if you want to overwrite wsock32.dll, type "y" for yes. If you get an error message, type "del wsock32.dll" , press "enter" or "return" and do step 7 again.

( 9) Type "del ska.dll", press "enter" or "return".

(10) Type "del ska.exe", press "enter" or "return".

(11) Type "del liste.ska", press "enter" or "return".

(12) *OPTIONAL* If you have followed all of the steps correctly, you may delete "wsock32.ska"

safely (Type "del wsock32.ska" and "enter" or "return"). I would suggest renaming it so that you can keep it without it being detected by an antivirus program. To rename it type "ren wsock32.ska wsock32.old", then "enter" or "return".

(13) Type in "exit" and press "enter" or "return".

(14) I suggest that you notify everyone on your email list about the virus since you may have sent

it to them unknowingly.

Unless you are running antivirus software with an updated data file, you could easily catch this virus again or another one. If you already have the software, you should update your data files at least monthly. If you do not have antivirus software, I suggest that you go to www.mcafee.com and download the FREE evaluation version of their software.

This virus overwrites 2048 sectors at beginning of each hard disk and overwrites part of the Flash BIOS boot block. The trigger for this virus is opening an uninfectable EXE file on 26 April (CIH.1003, CIH.1010.A), 26 June (CIH.1010.B) or on the 26th of any month (CIH.1019).

This virus has caught the world’s attention. Flash ROM technology has existed for several years. Flash ROM allows the BIOS to be stored in a chip that may be rewritten by software. Earlier technology allowed reprogramming the BIOS by removing the chip and erasing it under ultraviolet light. Flash ROM technology meant that BIOS upgrades and bug-fixes could be implemented more cheaply and easily - in fact, by the user - rather than requiring special skills and equipment.

Therefore, this virus can do major damage to your computer’s ability to boot up ---- the fix is to purchase and replace the BIOS chip.

*** WHEN YOU SEND AN EXECUTABLE FILE AS AN ATTACHMENT TO YOUR EMAIL ---- PLEASE TELL THE RECIPIENT WHAT THE ATTACHMENT IS ABOUT – IT GIVES THE RECIPIENT MORE INFORMATION TO DECIDE IF HE WANTS TO OPEN IT OR NOT ***

Uninstalling programs can be tricky and should rarely be done by just deleting files or folders from Windows Explorer. During installation, most programs make many system adjustments and bury small parts of themselves in the Windows Registry and elsewhere. Deleting major parts leaves these minor parts, such as orphan files, settings, and shortcuts, behind.

A commercial uninstaller utility such as CleanSweep or Remove-It can help you perform the task of uninstalling a program --- or it can hinder you. These programs work best on uninstalling programs that were installed AFTER you installed the uninstaller utility because it will keep a record of what changes were made. When you wish to uninstall a program that was installed before the uninstaller utility, you will be presented with messages about shared files, etc. where they wish you to make the decisions (the same ones that you have to make when you do your uninstalling through Windows 95/98 in the Control Panel).

You may think that Windows 95/98 is performing the uninstall of your programs when you go to the CONTROL PANEL – ADD/REMOVE PROGRAMS. This is only Windows 95/98’s collection point of the uninstall program from each of your software manufacturers (any software manufacturer that has written their code correctly for Windows 95/98 will have their uninstall listed here – programs that were written for Windows 3.x or DOS will NOT be listed here). If the vendor writes his code correctly, all references to the program will be removed through this method.

If you are going to use an uninstall utility, do not just install it. Learn how to access it – what settings you are using – how to disable it if you wish – is it running in the background all the time or do you have to activate it.

The following web address will allow you to place yourself on a list to help remove the junk mail you receive and the phone solicitations. It may not be perfect but it will effectively reduce the amount that you receive.

http://www.unlistme.com

To view the HTML handouts in Outlook Express, notice the large paperclip on the gray header to the message (where the TO: and FROM: are located). The paperclip is on the right side of this header and will turn yellow when you move your mouse cursor over it. If you click on this paperclip, it will tell you the name of the attachment. Click on the name. Next you will be ask if you wish to OPEN IT or SAVE IT TO DISK. If you choose to OPEN IT, it will be displayed in your browser. Then you can print it without any headers – just like you would print any other web page.

If your dialer is not opening when you open Netscape, check this setting. In the CONTROL PANEL – click on INTERNET. Then click on the CONNECTION tab. Place a check mark next to CONNECT TO THE INTERNET USING A MODEM (and not Connect To The Internet Using a Local Area Network).

Be sure to check that your Virus program is scanning your internet downloads, your compressed (or zipped) files and all of your email attachments. Be sure that you are downloading from a reputable website!!