Hello out there, the virus is a happy99.worm. I qoute from Norton AntiVirus: "It modifies WSOCK32.dll to send itself as an Attachment when a posting is made to USENET or MAIL. Delete SKA.EXE and SKA.DLL in WINDOWS/SYSTEM folder and replace WSOCK32:DLL with WSOCK32.SKA in WINDOWS/SYSTEM folder." The newest version of Norton Anti Virus found and deleted it. At http://www.mals.net/happy99.htm there is a "wormcure" to download. I don't know whether it works, though. Especially Thomas should look at his system, as I got this charming creature under his name. Greetings from Berlin and I hope I haven't done any damage, Olaf
Follow Ups to this Message
Markup © John King, 2008. Web archive generated Tue, 21st August 2007.