| Port No | 119 |
| Service Name | Happy99 |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | Works on Windows 95 and 98. Starts on Windows NT, but does not copy itself. |
| Reference Link | Happy99 Trojan |
| Attack | It autoloads the Registry: HLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\ It does the following : 1. Worm / Mail trojan 2. Alters WSock32.dll. Disguised as picture with fireworks and the message ""Happy New Year 1999!". ; "Replaces your current winsock in order to attach the trojan to outgoing email." |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.