From: eins AT durchnull DOT de (Rudolf Polzer)
Newsgroups: comp.os.msdos.djgpp
Subject: Re: Please help with Happy time virus
References: <000001c0db2b$afa55aa0$64c8c8c8 AT rafek>
X-newsgroup: comp.os.msdos.djgpp
X-realname: Rafal Maj
X-Ringtones: http://ringtones AT durchnull DOT de
X-Original: no
Message-ID: <slrn9fsjqv.1tj.eins@www42.t-offline.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
User-Agent: slrn/0.9.6.3 (Linux)
Date: Sun, 13 May 2001 11:09:51 +0200
Lines: 20
NNTP-Posting-Host: 213.7.27.183
X-Trace: 989738220 news.freenet.de 22053 213.7.27.183
X-Complaints-To: abuse AT freenet DOT de
To: djgpp AT delorie DOT com
DJ-Gateway: from newsgroup comp.os.msdos.djgpp
Reply-To: djgpp AT delorie DOT com

Rafal Maj <maj_rafal AT poczta DOT onet DOT pl> wrote:
> I've just got this stupid appy Time virus from DJGPP news group. I deleted
> help.html files, and 1.html in C:\, and I set active desktop to Off. have I
> to do something more ? Is my OutLook 5.0 infected now ? Is it possible to
> track this f###### idiot & m##### f##### who posted this virus ?
> Thanks in advcie.
> BTW. I think that the idea of deleting from server news in HTML is very
> good.

Download a current virus scanner and try. You could also try searching for files
that contain 'happy time' or 'Stationery', but that is not 100%.

When you post or mail in HTML, you may still send out infected messages, so
really get a scanner!

-- 
$|=1;my($x,$y,$a,$b,$c,$d,$e,@s)=(40,25,0,1);print"\e[2J";for(1..11000)
{if($c=$s[$x][$y]=1-$s[$x][$y]){($a,$b)=(-$b,$a);}else{($a,$b)=($b,-$a)
}$d=$s[$x][$y^1]*(1+($y&1))+(2-($y&1))*$c;print"\e[".int($y/2).";${x}H"
.(substr(' .°:',$d,1));$x+=$a;$y+=$b;for(1..1000){};}print"\e[HDone.\n"