http://cnn.com/TECH/computing/9901/29/iworm-ent.idg/index.html
Internet worm can crash corporate servers
January 29, 1999
Web posted at: 12:23 p.m. EST (1723 GMT)
by Roberta Fusaro
(IDG) -- A Helsinki, Finland-based data security firm is warning
Netizens about a computer worm, called Happy99, that can send hundreds
of copies of itself to the same newsgroups and E-mail addresses that
an infected user is posting or E-mailing to.
Worms are *self* propogating, and do not rely on being attached
to *user* email.]
According to Data Fellows Inc., users' PCs don't suffer ill effects by
reading a Happy99 message in a Usenet newsgroup or in E-mail. When
someone executes the Happy99.exe attachment, a fireworks display
appears on his screen. Meanwhile, in the background, the worm alters
the host computer's Internet configuration to keep track of all E-mail
or newsgroup activity.
The worm then spams itself to the same newsgroups and E-mail addresses
to which a user posts. It also maintains a list of newsgroups to which
it has sent a copy of itself.
Data Fellows said the worm doesn't pose a threat to computer files in
the way a virus would but warned that it could slow down or crash
corporate E-mail servers because of the volume of messages involved.
Original PC configurations can be restored by renaming the host
computer's winsock32.dll file. In addition, Data Fellows has a patch
available on its Web site at www.datafellows.com.