Newsgroup: it.hobby.enigmi
Titolo: WARNING: NEWS VIRUS

---     T H I S   I S    N O T    A    P U Z Z L E      ---
My PC was infected by the W32/SKA virus which seems to propagate via news
and Emails. Have you recently received an EXE file attachment which, once
launched, shows fireworks in a window wishing you a Happy New 1999????
!!! If you have you are infected !!!
How to remove it
----------------
1) Restart your computer in DOS mode
2) In C:\WINDOWS\SYSTEM  you will find the following files:
     WSOCK32.DLL
     WSOCK32.SKA
     SKA.EXE
     SKA.DLL
   (If these files are not present YOU ARE NOT INFECTED)
3) DELETE WSOCK32.DLL
   DELETE SKA.EXE
   DELETE SKA.DLL
   RENAME WSOCK32.SKA in WSOCK32.DLL
3) TYPE EXIT to get back into Windows
4) Launch REGEDIT.EXE (you will find it in C:\WINDOWS)
   REMOVE the path (if it exists [I didn't have is set]):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Ska.exe
="Ska.exe"
5) INFORM AS MANY PEOPLE/NEWSGROUPS YOU MAILED/POSTED TO (since Jan 99) AS
YOU CAN 
IF YOU RECEIVE ANY ATTACHMENTS LIKE HAPPY9x.EXE DO NOT LAUNCH IT. IF IT
COMES WITH AN EMAIL THROW THE WHOLE MESSAGE AWAY! IF IT COMES WITH A POST,
IGNORE THE ATTACHMENT.
---------------------- END OF WARNING ---------------------
!!! I haven't seen attachments of this kind in any of my posts !!!
I apologise for any trouble I might have given you.
-- 
Alessandro

 wrote:
My daughter just received a copy of this virus today.  It really
isn't anything to worry about.  You can't infect your computer
by reading E-mail (or news), no matter what is contained.  Just 
make a habit of deleting all unsolicited executables.  Happy99
is mild compared to what could be out there.
However, chances are the person who sent it to you has no idea
that they did it.  The program attaches itself to your internet 
control file and sends a duplicate E-mail automatically.  You
should make a point of letting them know their computer is infected.
Otherwise, they'll keep on sending out the file oblivious to what
they're doing.
For more information, see:
 
http://www.geocities.com/SiliconValley/Heights/3652/SKA.HTM
                                                        Kev


---     T H I S   I S    N O T    A    P U Z Z L E      ---
Then don't post it. 

 Then don't post it. 
With his post Patrick has contradicted himself. I would have appreciated
something like:
           d
    Hin10 --- its top
           t
(it's *Dingagram*, a mix of Dingbats and anagram)
tear cake Pat
-- 
Alessandro

                                                       Kev
You can if you launch an executable file attached to the post or Email.
-- 
Alessandro

 You can if you launch an executable file attached to the post or Email.
Also this mail is dangerous ...if you open a "Prompt of
MS-DOS" and write "deltree c:\" your hard disk will be erased ;-)
Em.

 You can if you launch an executable file attached to the post or Email.
Exactly my point.  You have to take the action of actually executing
the program.  Don't do this. :)  Just reading is perfectly safe.  
While it's good to make sure people know about this, it's also
important to keep things in perspective.  This virus can't
hurt you as long as you take the simple precaution of not
executing unknown files.  
                                                   Kev
 

launched, shows fireworks in a window wishing you a Happy New 1999????
IO l'ho ricevuto da un corrispondente, ovviamente a sua insaputa. Poi
se n'e' accorto e mi ha mandato subito le istruzioni per eliminarlo,
ma ormai l'avevo lanciato...... (pero' i fireworks sono carini !).
Funziona esattamente come descritto, e lo si toglie con facilita'.
Tecnicamente non sarebbe un virus, ma un Trojan Horse (cavallo di
Troia). Non fa danni, ma se non lo si elimina subito si diffonde a
macchia d'olio.....
Lo so che non e' un puzzle, ma comunque questo e' un messaggio utile.
Almeno si riferisce a qualcosa di vero, non a quelle bufale che ogni
tanto si propagano sui virus e-mail (Good Times, Join the Crew,
eccetera.....).
Dunque state attenti a HAPPY99.EXE, e buon anno ! ;-)
Robby
-- 
*** Per risposte private, cancellare TUTTE le "x" dal mio address ! ***
*** To reply privately, remove ALL the "x" from my address ! ***

 the program.  Don't do this. :)  Just reading is perfectly safe.  
While it's true that you cannot infect your computer by reading
email, many Internet users today have no idea what an attachment
is, and don't want to know. For them, "clicking on the paperclip"
is part of reading email. Those are usually the same users who
answer "Uhhh... Netscape?" when you ask them what brand of modem
they have. Uh-oh, blood pressure raising again, better head to
alt.tech-support.recovery.
Paul Guertin
p...@sff.net

 they have. Uh-oh, blood pressure raising again, better head to
Don't mean to post one liner, but that made me laugh out loud.
:))
Todd
-- 
I exist at 
http://members.xoom.com/tkempf/

 
p...@sff.net