Dave,
You are right there is a couple of registry items that may need to be changed
for a
different virus, this is called something like "happy". This infects the
registry
to look and run the happy.exe file. There was another one recently going around
too
dont remember but if you find one let me know, ill find the fix.
There is a simple fix for that too by editing the some registry items, email me
if
you have this virus and ill send the fix for that one too.
Jonathan Amo
Dave Dahlgren wrote:
> I have found there is a link in the registry that may or may
> not need to be changed too jon. look for 'runonce'
> Dave
>
> Jonathan Amo wrote:
> >
> > List,
> >
> > First if the virus is a *hybris*, what this virus is doing is infecting the
> > wstock32.dll file in your windows/system folder. This file gets infected
>with
> > the virus and you will start receiving errors in any program that is an .exe
> > file. word, exel, frontpage etc etc and giving you abnormal errors.
>Antivirus
> > software will not let you delete the file.
> > There is a very simple fix for this, delete the wsock32.dll file and replace
> > with a known good file. Before you delete the file make sure to get a copy
>of
> > it from your windows 98 disk and put it on your computer somewhere so when
> > you delete it you have it to put back in the system. You can find this on
>the
> > windows 98 disk in the precopy1 zip file.
> > Steps to do.
> > First download the wsock32.dll file to your computer from win98 cd or put it
> > on a disk from another computer.
> > Second delete the file wsock32.dll in the windows/system folder
> > Third restart your computer (this will give you an error when loading
>windows
> > but just click ok, and you will not be able to execute any program)
> > Fourth goto the folder where you copied the good file, and put it back in
>the
> > windows/system file.
> >
> > Note you cannot just copy over the old file you must delete the file then
> > replace with a known good one.
> >
> > Any questions please let me know, if you need help please email me the name
> > of the virus specifically and I will help you get rid of it. Offering this
> > service to all the land speed community.
> >
> > Jonathan Amo
> > www.landracing.com
> >
> > Daniel Wright wrote:
> >
> > > Hi
> > > Several of us folks from the U.S.F.R.A. have received an email virus over
> > > the weekend. It is an attachment named joke.exe. Do not open the
> > > attachment. It is attached to an email from Hahaha@sexyfun.com the
> > > subject line is snow white and the seven dwarfs-the real story.
> > > I personally received it but my virus scanning software flagged it, so I
> > > havent opened it. Delete the file if possible. Do NOT open it.
> > >
> > > Daniel Wright
> > > University of Utah
> > > 20 S 2030 E
> > > BPRB Rm 332
> > > Salt Lake City, Ut 84112-9454
> > > email daniel.wright@genetics.utah.edu
> > > 801-585-7863
> > > FAX 801-585-7177
///
/// land-speed@autox.team.net mailing list
///
|