Netscape 4.7 users:

1. Bring up the Netscape Messenger (e-mail program)
2. In the top menu, click on EDIT, and then MESSAGE FILTERS
3. When the "Message Filters" window appears, click on the "NEW" button to the right
4. When you are done typing, press the "OK" button, and then the "OK" button again. The mail filter will be activated and any Hahaha virus emails will be automatically deleted the next time you receive one.

Outlook Express users:

1. Bring up the Outlook Express mail program
2. In the top menu, click on TOOLS, then MESSAGE RULES, and then MAIL
3. When the "Message Rules" window comes up, look to the right and click on the "NEW" button.
4. In the box that says select the conditions for your rule: choose where the from line conatins people.
5. In the box that says select the actions for your rule: choose delete it.
6. After checking the boxes as listed above, click the "contains people" phrase in blue.

7. When the "Select People" window comes up, type " Hahaha@sexyfun.net " (without the quotes) in the first box, then click "ADD", and then click "OK".
8. When you get back to the "New Mail Rule" window, type "Hahaha virus filter" in the "Name of the rule:" box.
9. When you get back to the "Message Rules" window, press the "OK" button. The mail filter will be activated and any Hahaha virus emails will be automatically deleted the next time you receive one.

One of the more current and advanced viruses is sent through email with the return address listed as Hahaha@sexyfun.net. The "Snow White" virus, also known as the "W95.Hybris.gen" virus, may not initially be noticable on your system, but in time it can cause some serious damage. Once the dwarf4you.exe program is launched, it attaches itself to numerous important system files. The attachment may also have one of several different names, including, but not limited to:

The safest way to rid yourself, so far, from this virus is to use a virus removal tool from Symantec

Click to download this tool : fixhybf.zip

After downloading fixhybf.zip, double-click on the icon. You will be presented with a dialogue box asking you to specify where you wish to unzip the tool. Choose a location. It is best to save directly to your drive C:/
After unzipping the file, reboot into DOS mode by clicking on START, then SHUTDOWN, and then choosing to RESTART IN MS_DOS MODE, change to the directory where you unzipped fixhybf.zip and type the following at the command line prompt. For example, if you saved it to your C:/ drive:
at the "C:/Windows" prompt, type in cd..
then at the "C:/ " prompt type in fixhybf /a
then at the "C:/ " prompt, type in fixhybf c:

NOTE: typing the "fixhybf /a" will search all disk drives except the floppy disk or A:/ drive, finding and fixing the corrupted files. Typing "fixhybf c:" will only search the C: drive, finding and fixing the corrupted files.



The virus-removal tool and hybris information is provided by http://www.symantec.com/