A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z | Encyclopedia Home
H letter viruses. Scroll down the page to view or choose from the names below:
Happy99 |
Hybris
Happy99
Hybris
If you are unable to find a description for a particular virus, please contact me or post a message in the forum.
Aliases: Win32.Ska, Spanska
Type: Email worm
Systems Affected: Win 95, 98, NT, 2000
Payload: No
ITW: Yes
Origin:
Description: Each time the infected user sends an email or posts to a newsgroup, the worm composes and sends a second one with no text but carrying an infected attachment of itself.
What to look for: Check the Windows\System directory for the presence of SKA.EXE and SKA.DLL
How to prevent it: Do not open attachments named Happy99.exe. Do not open any attachments that were unexpected - regardless of source.
Aliases: I-Worm.Hybris
Type: Email/Internet Worm
Systems Affected: Win32 systems
Payload: As the worm is self-updating, functionality may vary
ITW: Yes
Origin: Poland
Description: The worm infects WSOCK32.DLL, meaning it is activated everytime a person connects to the Internet. It also attaches itself to all outgoing messages sent from the victim's machine. The worm self-updates via binary postings to the alt.comp.virus newsgroups. These postings are, of course, anonymous. Estimates are that 32 different plug-ins may be available.
What to look for: Some of the registry key values are variable. F-Secure provides a complete description, including affecting system settings.
How to prevent it: Do not open any attachments that were unexpected - regardless of source.
Aliases:
Type:
Systems Affected:
Payload:
ITW:
Origin:
Description:
What to look for:
How to prevent it:
Aliases:
Type:
Systems Affected:
Payload:
ITW:
Origin:
Description:
What to look for:
How to prevent it:

