[Xitami] Happy Time Virus

Kimman Balakrishnan xitami@lists.xitami.org
Wed, 26 Sep 2001 09:01:21 +0530


One of the mails on the mailing list recd today contains the Happy Time
virus ... seems like someone's machine has been infected and the virus has
sent out a mail to the xitmai mailing list as well.

The Symantec web site's removal tool, fixhaptime.exe, could not remove it
from my Netscape mail file - perhaps because it is embedded within the mail
file. The only solution on Netscape was to open the file in MS Word and to
delete the "script" ... search for "Rem I am sorry! happy time" - this is
the first line in the VB script element of the HTML formatted message.
Delete the lines between the <script language='VBScript'> and the </script>
tags and save the file again.

For details on the virus search on google for "VBS.Haptime.A" - this will
provide a URL to the Symantec web site that has details.

Kimman Balakrishnan