Click to See Complete Forum and Search --> : Internet not working after Happy99 removal


cabal
April 6th, 2001, 05:11 PM
This pc is running win95b and internet explorer 5.1. It was working fine till he got an attatchment with the happy99 virus. I installed Norton anit-virus 2001 which took care of the virus but the internet quit. Norton put wsock32.dll in quarantine after removing the virus, so I restored this file and the internet started to work again. Then Norton kicked in and said we had a virus, so I let it fix it. Sure enough the internet quit again. It will dial out and connect but won't go anywhere, not with internet explorer, netscape, opera , or outlook express. I tried restoring the file from quarantine again but it wouldn't let me. I have tried everything I can think of :
1.un-install IE5 and re-install.
2. un-install dial-up networking and re-install.
3.Un-install all networking components and re-install.
4. Un-install Norton AV, then un-install everytthing listed above and re-install.
5.re-install win95b.
I will probably end up formatting the hard drive and starting over but if I can avoid it I would prefer it. :( null

KoWind7
April 6th, 2001, 05:23 PM
Originally posted by Cabal:
This pc is running win95b and internet explorer 5.1. It was working fine till he got an attatchment with the happy99 virus. I installed Norton anit-virus 2001 which took care of the virus but the internet quit. Norton put wsock32.dll in quarantine after removing the virus, so I restored this file and the internet started to work again. Then Norton kicked in and said we had a virus, so I let it fix it. Sure enough the internet quit again. It will dial out and connect but won't go anywhere, not with internet explorer, netscape, opera , or outlook express. I tried restoring the file from quarantine again but it wouldn't let me. I have tried everything I can think of :
null

Except for 1 thing...check Norton's site for instruction on how to fix it. You installed NAV AFTER being infected, so you have to follow the repair directions.

The simple version is:
1) let NAV quarinteen wsock32.dll
2) delete the infected dll
3) restore the dll from the windows cd or by renaming wsock32.ska to wsock32.dll

the long version is Happy99 Details (http://www.symantec.com/avcenter/venc/data/happy99.worm.html)

They also have an small fix program for Happy99

cabal
April 6th, 2001, 08:12 PM
I looked at Symantec's virus page for happy99 but I missed the renaming of the wsock32.dll. I tried the fix happy99 removal tool but it didn't fix the internet problem. It did get rid of happy99. I will search for the renamed wsock32 next week. :rolleyes:

cabal
April 10th, 2001, 05:24 PM
I finally got this monster fixed but only by upgrading it to win98. I went through the symantec procedures of deleting the corrupt wsock32.dll and related files, and extracted a new wsock32 but the internet still didn't work- it connected but wouldn't go anywhere. I guess more files were corrupted than just those relating to the wsock and dial up networking. :p