How to Remove Happy99.exe (ska)

1. Reboot the computer in DOS mode. This can be done from a clean boot disk or by pressing F8 upon starting up Windows to enter "Command Prompt" only.
2. Type CD C:\Windows\System to enter the Windows system folder on the hard drive.
3. Delete virus files by entering three different commands, DEL ska.exe, DEL ska.dll, DEL liste.ska, and DEL wsock32.dll.
4. Rename the virus modified wsock file by entering two commands, ATTRIB -r wsock32.dll and then REN wsock32.ska wsock32.dll.
5. Type WIN to start up Windows.
6. Click on the Start button and select "Run…" from the Start menu. Type REGEDIT and click on "OK" to run the Regedit program.
7. Click on plus symbol for each directory, in order: HKEY_LOCAL_MACHINE, Software, Microsoft, Windows, Current Version.
8. Click on "RunOnce" folder under the Current Version directory and see if there is a file titled "Ska.exe".
9. If Ska.exe is present in the RunOnce directory click on Ska.exe and press Delete on the keyboard.
10. Confirm the deletion (yes) of Ska.exe and select "Exit" from the Registry menu.
11. Locate and delete all copies of Happy99.exe (SKA) on the computer to avoid another infection. Diligently search email files and attachment folders.
12. Click on the Start menu and select "Files or Folders…" from the Find menu. Search for wsock32.dll on the "C" drive.
13. Right-click on the found wsock32.dll file and select Properties at the bottom of hte pop-up menu.
14. Add a checkmark next to the "Read-Only" option and click on "OK".
15. Copy Here

Tips:

1. Having a clean, locked, boot disk or CD on file helps with rescue and virus removal efforts.
2. Only modify the registry as explained in the steps above to avoid serious operational errors.
3. Locking a clean wsock32.dll file protects it from being modified by a virus in the future.