VBS.Haptime(aka Happy Time) - Untitled.htm (A)

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: VBS.Haptime

Sender:

Varies.

Subject:

Fwd (A)
Help (A)
I AM THE EVOLUTION BABY !!! (C)

Message:

The message area is blank.

Attachment:

Instlog.htm (B)
THE_EVOLUTION.htm (C)
Untitled.htm (A)

Comments: A Visual Basic Script worm that infects .htm, .html, .vbs, .asp, and .httfiles.

Symptoms:


 The worm creates the values: 
 Message Send HTML    1 
 Compose Use Stationery    1 
 Stationery Name    WindowsUntitled.htm 
 in the registry key: 
 HKEY_CURRENT_USERIdentitiesSoftwareMicrosoftOutlook Express5.0Mail.
This ensures that the user uses the infected stationery.

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Run LiveUpdate to make sure that you have the most recent virus definitions.
Start Norton AntiVirus (NAV), and run a full system scan, making sure that NAV is set to scan all files.
Delete any files detected as VBS.Haptime.A@mm.
To delete .htt files:
Using windows Explorer, browse to C:\Windows Web
NOTE: IF you have Windows installed to a different location, make the appropriate substitution.
Click Start, point ti Find, and then click Search or Files or Folders.
Make sure that "Look in" is set to C:\Windows Web.
In the "Named" or "Search for..." box, type--or copy and paste--the following file names:
*.htt
Click Find Now or Search Now.
Delete the files that are found.
To edit the registry:
CAUTION: We strongly recommend that you back up the system registry before making any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Please make sure you modify only the keys specified. Please see the document How to back up the Windows registry before proceeding.
Click Start, and click Run. The Run dialog box appears.
Type regedit and click OK. The Registry Editor opens.
Navigate to and delete the following keys:
HKEY_CURRENT_USER\Software\Help\Count
HKEY_CURRENT_USER\Software\Help\FileName
Exit the Registry Editor
To reset Microsoft Outlook Express:
Start Outlook Express.
Click Tools, and click Options.
Click the Compose tab.
In the Stationery section, if you do not use stationery when sending email, uncheck Mail.Otherwise, click Select and select the stationery that you want to use.