W32/Ska-Happy99

Category: Viruses and SpywareProtection available since:07 Jun 2006 00:00:00 (GMT)
Type: Win32 executable file virusLast Updated:07 Jun 2006 00:00:00 (GMT)
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

This virus modifies wsock32.dll, so that when an email is sent, a second message containing the virus is sent also. The virus will also drop ska.exe and ska.dll. If you find the virus in ska.exe, ska.dll or Happy99.exe, we recommend running SWEEP again in Full Mode to detect changes in wsock32.dll.

The virus also copies the original wsock32.dll to wsock32.ska. It creates the file liste.ska which is a list of the mail addresses to which Happy99.exe is sent. It uses liste.ska to ensure that it mails Happy99.exe to each address only once.

When triggered W32/Ska-Happy99 displays a fireworks effect with the message "Happy New Year 1999".

The virus was written by the French virus writer, Spanska.