|
|
Happy.Exe:
Happy.Exe Removal
Manual Removal
- Deletes the SKA.EXE and SKA.DLL files
- Modifies WSOCK32.DLL.
- It removes the following Windows Registry modification
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
\CurrentVersion\RunOnce=SKA.EXE
- Happy99.Worm adds this Windows Registry entry
if WSOCK32.DLL is in use when the worm attempts
to modify it (i.e. a user is online or connected to a network).
|
|
|