Computing.Net > Forums > Windows 95/98 > Happy virus

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Happy virus

Reply to Message Icon

Name: Batla
Date: November 22, 1999 at 04:42:31 Pacific
Comment:

A mate was sent the Happy99.exe worm and in turn may of passed it on without knowing. It travels by e-mail and affects the send and receive process on the victim's browser, I have IE5 on win95b and lately IE5 express has been acting up, so I checked "find all files" and Amhappy.wmf 2KB modified 12/9/96- showes up, but the Happy99.exe virus scanner claims the virus or "worm" aint there.
So does anybody know if Amhappy wmf is part of something? or maybe another form of the virus?
Thanks for any answers



Sponsored Link
Ads by Google

Response Number 1
Name: Gordon
Date: November 22, 1999 at 05:10:58 Pacific
Reply:

Amhappy.wmf is not an executable file. It's one of the sample cliparts found in the Microsoft Office.



0

Response Number 2
Name: Jim Clark
Date: November 22, 1999 at 13:35:19 Pacific
Reply:

Goto http://www.symantec.com

Check the Virus University database there. There may also be suggestions on how to rid yourself of the virus. Symantec will know, if there is a fix.


0

Response Number 3
Name: Joel Harrison
Date: November 23, 1999 at 12:58:42 Pacific
Reply:

I've heard of this virus; it supposedly shows a happy face or some such, but in the background it uses a macro to modify your Normal.dot file (in Office 9x/2000) to replicate itself.

The easiest way to protect yourself from these kinds of macro viruses is to make your Normal.dot file read-only.

To purge the virus, restore your Normal.dot file from your Office setup disks. Somewhere in that same directory is a text file (although it may have some strange extension) with a list of e-mail addresses you have unwittingly sent the virus to.

As far as I know, the virus does not have any majorly destructive attributes, although we caught it early enough that we may not have noticed any time-delayed destruction.

Hope that helps. Remember the hint, though; most macro viruses out there modify your Normal.dot and replicate through every Office document or e-mail you send. Write-protecting Normal.dot (do you really use custome templates anyway? Thought not) severely cripples the virus's attempts to replicate. You'll know you have a macro virus when you try to save or open a Word document and you get a pop-up window saying "Cannot write to global template." Start looking for recently modified files and delete any that look suspicious.


0

Response Number 4
Name: SirLeo
Date: September 12, 2000 at 12:33:59 Pacific

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More


Invalid page exeption 28:... Driver Sis 6202 for Win98



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows 95/98 Forum Home


Sponsored links

Ads by Google


Results for: Happy virus

sever problems www.computing.net/answers/windows-95/sever-problems/25955.html

problem registering kernel32.dll fatal error www.computing.net/answers/windows-95/problem-registering-kernel32dll-fatal-error/10823.html

Caught out by trojan/worm - PLEASE HELP! www.computing.net/answers/windows-95/caught-out-by-trojanworm-please-help/95520.html