msstone
|
posted on December 10, 2000 12:08:30 PM
I had a user email with some questions last night. I was polite and answered his questions. One was if I would take half of what I had an item listed for. Even though this item would retail for 3 to 5 times what I had it listed for.
This morning I received an email with this Happy 99 attached to it. Isn't this a virus??
I did not open it.
Is it or is it not a virus?
|
Shoshanah
|
posted on December 10, 2000 12:13:45 PM
Sure is....
********************
Gosh Shosh!
http://members.ebay.com/aboutme/rifkah/
|
Shoshanah
|
posted on December 10, 2000 12:18:22 PM
http://www.symantec.com/avcenter/venc/data/happy99.worm.html....description
http://www.symantec.com/avcenter/venc/data/fix.happy99.worm.html fix
********************
Gosh Shosh!
http://members.ebay.com/aboutme/rifkah/
|
msstone
|
posted on December 10, 2000 12:56:31 PM
Thanks Shosh: I downloaded and ran the program to kill the worm. I was lucky that I didn't open it.
Some days I really wonder if this is all worth it. Lately I have been having more of these days then days when I know it is worth it.
I think I am burned out. I think I am going to take a vaction from ebay after the 1st of the year.
|
Shoshanah
|
posted on December 10, 2000 01:04:11 PM
 ....Don't take such drastic measures...Just de-activate your Windows Script Hosting....
Go back to Symantec http://www.symantec.com/avcenter/venc/data/win.script.hosting.html, and download and install the noscript.exe
********************
Gosh Shosh!
http://members.ebay.com/aboutme/rifkah/
|
dman3
|
posted on December 10, 2000 01:17:41 PM
Happy99 Virus wow talk about your delayed bad news email.
This one is well past its experation date and it made your computer sick when it was freash.
http://www.Dman-N-Company.com
|
Meya
|
posted on December 10, 2000 01:33:01 PM
I'm not sure if the scripting options will affect the Happy 99 virus. That virus is a plain executable file. Chances are the sender doesn't even realize they have it. Happy 99 shows a pretty little Fireworks show when you run it, but that is what infects you. Then it replicates to your windows address book.
The KAK virus/worm is activated through scripting though and there are security patches to prevent this one.
I don't run any .exe files, no matter who sends them to me.
|
Shoshanah
|
posted on December 10, 2000 01:41:11 PM
I remember a really nice user whom I was helping with photography. One day, he wrote that Computers were sooooo neat: He had just discovered that he had a new program, and a beautiful Fireworks came up when he clicked on it.....
It had been residing there, nice and quiet, till the day he finally saw it...and thought it WAS a new program......Not funny...but...cute?
Good point Meya, about scripting. However Symantec's link to fixing the Happy 99 is still up, so I imagine people still come across it, once in a while...
********************
Gosh Shosh!
http://members.ebay.com/aboutme/rifkah/
[ edited by Shoshanah on Dec 10, 2000 01:42 PM ]
|
Shoshanah
|
posted on December 10, 2000 02:23:49 PM
msstone....Thanks for your Email...You might want to check your server, as my reply came back with "service unavailable".... I just sent you another, using your listing page...will see if it goes through...Might have had a hiccup 
********************
Gosh Shosh!
http://members.ebay.com/aboutme/rifkah/
|
Shoshanah
|
posted on December 10, 2000 03:12:11 PM
AOK now...
********************
Gosh Shosh!
http://members.ebay.com/aboutme/rifkah/
|
msstone
|
posted on December 10, 2000 03:55:44 PM
Thanks for the advise Shosh and others.
I wrote powersellers who took the stance that it could have been sent innocently.
I think that if it was innocently sent it would have been on their first email. It would have not been send as an attachemt with nothing written on the email.
I rewrote to powersellers and they are sending it to safe harbor. I also sent it to safe harbor.
I just cannot understand why anyone would do that. Just because I would not sell him an item at several hundred dollars less then my cost in an illegal transaction.
|
rancher24
|
posted on December 10, 2000 04:40:48 PM
msstone...I believe that Happy operates by sending out it's own email, immediately after a user sends an email (to the same receipant)...Most people do NOT know they have it....
BTW, I just had an infected user send it to me this week (of course I dleleted it faster than I could actually "say" HAPPY!)...Maybe on the increase again?...Or maybe just the season to get "Happy"....Watch out for it!
Shosh...thanx for postin' the fix...I will pass it on to my buyer...
~ Rancher
|
