So, to go along with the problems Suckahs has been experiencing in the past 72 hours, I've got a virus on my computer, and I'm spending my sleeping hours trying to clean it up. I need to purchase Norton Internet Security I think. What a mess.
W32.HLLP.Handy
Archives
Where Old Posts Go to Die
You are reading W32.HLLP.Handy, posted to the Nedward.org weblog.
Categories: tech
No trackbacks for this entry.



Technorati Profile
Comments
From Only the Most Respected Minds
wrote on Jan 22, 2003 8:29 PM
I got the same virus! How do i get rid of it?
I got norton anti virus and it wont do anything.
wrote on Jan 23, 2003 2:00 AM
I tried downloading other virus programs, but they weren’t terribly successful at detecting anything.
You should just backup stuff, and reformat C:... if you manage to get rid of it, let me know!
wrote on Jan 23, 2003 10:05 AM
I had the same virus. I use Norton AV 2002, and I had to download the new virus definitions manually, with the intelligent installer, did a scan, and it found all the infected files. After that, I just went through the infected files and deleted them, then emptied the recycle bin. Nortons LiveUpdate wasn’t installing the new definitions, i’m not sure if this was virus related or not, but the Intelligent Installer worked like a charm.
Note: Don’t believe the AV program when it says the files are repaired, it is safer to get rid of them and re-intall from a clean source.
Hope this helps!!
wrote on Jan 24, 2003 9:38 AM
I got the same thing. No idea where it came from. I used Norton AntiVirus Corporate Edition and it found all infected files and cleaned them.
wrote on Jan 25, 2003 5:01 AM
i agree with Tony - same here
wrote on Jan 25, 2003 1:52 PM
this virus is very common on Kazaa. Always keep virus scan up to date.
wrote on Jan 25, 2003 3:30 PM
yep, kazaa is the place for HANDY
wrote on Jan 25, 2003 5:17 PM
I got rid of it just using norton……I did a live update last night….Of Course i dont use kazaa lite often enough for it to spread so , the best advice i have is to uninstall and re install norton, b/c there’s a good chance that the virus’s first target is an antivirus program…….and can someone tell me the full effect of the virus?
wrote on Jan 26, 2003 4:45 PM
I have tried to delete the infected file now “files”, but it has atatched to my system restore and keeps making copies and extracting them. Now Nortons can no longer delete the files, it says they are too damaged. Any sugestions on what to do next? I had 1 infected file until nortons tried to repair and delete, now i am up to 42 of them and can’t do anything!
wrote on Jan 27, 2003 8:27 PM
Check out his website by McAffee. They have suggestions specific to people using Windows ME/XP. Try doing a search for “W32.HLLP.Handy” on www.google.ca .
wrote on Jan 27, 2003 9:59 PM
Does anyone know who makes all those viruses?
I belive some companys do, to improve selling their antvirus programs.
wrote on Jan 28, 2003 7:16 AM
Hi everyone— let me expand on my experience with this virus:
- Used KazaaLite
- downloaded an anti-Spam software package (McAffee)
- installed the package
- my system started acting funny… browser windows, Task Manager, and Norton 2002 were being closed
I tried to install all kinds of virus scanning software, and finally, I just made the decision to reinstall Win XP.
Once, I did this, I installed Norton 2003, and it detected the offending file (on another drive).
All better now. But, MAN! what a hassle. Scan EVERYTHING you get from the internet…
wrote on Feb 8, 2003 6:18 PM
to get rid of all the copies system restore has u have to disable system restore then restart your computer to purge the system restore files.
on windows me: go to start -settings-control panel-system-performance-filesystem-troubleshooting-then disable system restore.
Now Reboot DONE !
wrote on Feb 15, 2003 5:22 AM
I wonder what happens if I delete ‘my shared folder’? do i really even need it?
wrote on Feb 15, 2003 12:14 PM
well, if you installed the infected file already, i would assume it had spread outside of that folder, no?
can you run a virus checker like norton? or does it “end task” it?
wrote on Feb 17, 2003 9:51 PM
alright i got this fuckin handy virus now will someone please instant message me and help me get rid of the fucking thing…..my sn is s0dimizer…….thanx
wrote on Feb 17, 2003 9:52 PM
alright i got this fuckin handy virus now will someone please instant message me and help me get rid of the fucking thing…..my sn is s0dimizer…….thanx
wrote on Feb 18, 2003 9:51 AM
get mcaffee 7.0 corporate edition and update the angine and dat files and then you can remove.
this virus is also known as the folowing:
Name
MultiDropper-EX
W32.HLLP.Handy (NAV)
W32/HLLP.Hantaner.A (F-Prot)
Win32.HLLP.Hantaner (AVP)
Good luck!
wrote on Feb 18, 2003 11:21 AM
Help! i got this handy virus and updated my Norton 2003. Deleted files uninstalled kazaa and now my PC won’t even start. Within 5 hours my pc has gone from norton saying the it was now clean to not even being able to get into the bios!! I am using my laptop but am now desperate to solve this. Anyone have any ideas?? I daren’t reinstall XP incase its sitting in the registry. Help…..anyone…..?????
wrote on Feb 18, 2003 2:25 PM
Hello, i have the same problem with handy.
I can’t even restart the computer.
I even put another hard drive, but its the same.
I tried to reinstall any windows, and it doesnt work.
When i try to reinstall windows xp, it stops saying there’s a prob with the acpi.sys file, which is corrupted.
Anybody can help please!!!
wrote on Feb 18, 2003 4:36 PM
I still have not fixed mine as I do not have my XP disc until next week, but have been told that this virus sits in the bios clock. You sould try removing the battery, switching the jump (under the battery) to reset and trick the bios - this resets to default, and then reinstalling. If this doesn’t work I was advised to get a new ahrd-drive! anymore ideas I would be so grateful. cheers!
wrote on Feb 21, 2003 10:29 PM
how do i get rid of this virus
wrote on Feb 24, 2003 4:48 PM
NOOOOO!!! I just got something off of Kazaa, scanned it before i installed it with Norton Antivirus 2002 and then installed it… When I tried to open the file it wouldn’t open and then next thing I knew i got an alert from Norton. It said it had detected the virus but couldn’t repair it. I managed to “quarintine” the file before it spread but can’t get rid of it. When I click delete it says to check to see if the file is right protected… PLEASE HELP!!!
wrote on Feb 28, 2003 5:56 PM
I just reformated my computer yesterday and downloaded kazaa and nortons. And got this W32.HLLP.HANDY form a progam named red alert. Glad i have a antivirus.
wrote on Mar 2, 2003 1:34 PM
Well….I’ve had this virus quite a few times and my anti-virus always automaticly cleans it. I have Norton AntiVirus Corperate Edition. So if you are having problems ….I would suggest getting that program.
wrote on Mar 2, 2003 4:26 PM
Yea, I had Norton 2002 and it was updated, and I still got infected. So, yea, get the most updated software you can… 2003 is good.
wrote on Mar 4, 2003 11:15 AM
My Norton virus warned me about Handy as soon as I started downloading an infected file from Kaaza. Luckily it repaired the file and I stopped the download before the virus got into my system. According to the Norton website, this virus was written to specifically infect files on Kaaza. As people trade files they just keep spreading it around. So just pretend its sex. Assume all your partners are infected. Keep your AV software up-to-date. And practice safe downloading!
wrote on Mar 4, 2003 11:38 AM
wrote on Mar 4, 2003 3:48 PM
I just acquired a copy of the Handy virus last night while d/l’ing AoMythology. Norton Corporate caught it immediately. I ran a scan and found it two more associated files, quarantined and deleted. When using Norton, make sure you have the auto-protect function working. It saved me.
wrote on Mar 9, 2003 11:19 AM
ME and XP users…
You need to shut off system restore so that Norton can get the backup infected files.
wrote on Mar 10, 2003 5:22 AM
This message is for eve
First of all, check out the viral discription here: http://hq.mcafeeasap.com/dispVirus.asp?virus_k=99881
When you deleted files, its likely you took out some system files, The virus probably isn’t residing in your PC anymore (maybe others are). Re?nstalling XP should work.. As for your bios story?? That just doesnt make sense…
Greetz Burnett
wrote on Mar 10, 2003 3:52 PM
I had quite a few files infected im my Kazaa directory before I installed Norton 2003 (for some reason 2002 didn’t detect it)
McAfee’s site says the virus just attaches itself to the nearest .exe file in the Kazaa directory and disables that file. So far I’ve noticed that to be the case. After NAV “quarantined” 62 of my files and I later deleted them I am proud to say the virus is gone. Whoever posted earlier about unplugging the clock battery and reseting the bios or getting a new hard drive is just a little bit extreme. Calm down, as viruses go - this one’s extremely mild. I wouldnt be surprised if some company wrote this virus just to stop people from pirating on Kazaa. It was written in borland so I guess it wasn’t a microsoft employee.
wrote on Mar 11, 2003 11:07 PM
well i have this handy virus and my computer keeps saying that i have this fucking virus and i dont know how to get it off i even deleted kazaa but now it takes time for the computer to turn off or restart can anyone please help me send me and IM.
wrote on Mar 12, 2003 7:11 PM
I recently got the handy virus… A piece of cake compared to the Yahaa virus!!! This shit disabed all my program including my antivirus. I downloaded a little program desinged to kill it but the virus disabed it as well. I finaly got rid of it by making a safeboot and turning off the restauration of the system. For Handy just scan with a good definition and it will be alright
wrote on Mar 13, 2003 3:02 PM
What baffles me is when U know you have the Handy virus, cause your PC is telling you it, you allmost certainly have an anti virus program. Now if the program is telling you your PC has a virus then it must allso be telling you which files are infected…. Now let the antivirus delete the files and your clean…. or do it yourself doesn’t matter one way or the other. This is not a very dangerous virus.. (just stop it in time) it infects executables in shared folders.. If any one of you don’t have an antivirus (or not uptodate) download a trial version of whatever uptodate antivirus you can find…
wrote on Mar 13, 2003 8:08 PM
WinMX got me. Norton detected it but did not catch it before it went to work.
wrote on Mar 15, 2003 1:09 AM
Hi. We recently got a new HP computer 3 days ago. I am a teenager so of course the first thing i did was download Kazaa to get some music. Well today the computer updated Norton’s 2003 virus definitons and now it says I have W32.HLLP.Handy in a kazaa file that’s not done downloading. Norton says its not able to fix, repair, quintine, or delete the file. I’m not able to delete it manually. It wont let me delete my kazaa shared folder (where the file is located) and when i try to uninstall Kazaa it says its running (which it isn’t!) It also wont let me delete the file manually when i click delete it doesnt do anything. HELP!!!! I feel horible we’ve only had the computer 3 days and I have alread fucked it up…. I’m gonna be killed!
If anyone out there can help me I would greatly apprechate it
wrote on Mar 16, 2003 3:17 AM
I have got the handy virus. It is giving me hell but I am giving it hell right back. I am using NAV 2002 and I am on a network with 3 other computers and NAV is taking care of those over the network. The virus is wide spread and far into its work but I think it is just about dead. if you have any Q feel free to e-mail me and find out how it turned out or see if i can help you thanks
wrote on Mar 18, 2003 1:20 PM
I have had this a$$ of a virus twice now - both times from Kazaa - I use NAV 2003 & both times it has caught it, deleted t & saved the file- god bless you NAV….what can I say just be careful people & as soon as you get notified of it STOP downloading - get yourself some AV protection sharpish.
wrote on Mar 25, 2003 10:00 PM
I just got this virus on Kazaa downloading Tropico. As long as you catch the virus while it’s still downloading and erase the .DAT file, you should be set. Even though NAV says that it can’t do anything with the file, you can.
I just deleted it, ran a full system scan with NAV2002, ran a scan on the Kazaa program folder, and everything came up clean.
I don’t know where you people are coming up with this BIOS not working and PC won’t boot bologna.. you probably just deleted some Windows system files in your NAV travels. Actually look at what you’re deleting, don’t blindly press next when NAV asks you to.
wrote on Mar 26, 2003 12:26 PM
I got the virus when I downloaded a self-extracting executable from Kazaa. It attached itself to a couple of files inside the Kazaa download folder as well as my system restore folder, usually C:\_Restore. Anyways, Norton detected the virus but couldn’t delete or remove the files inside my system restore folder. It said that the files were in use. Anyways, the easiest way to deal with that problem has nothing to do with any AV software. Just get your boot disk, reboot the comp to DOS mode, and delete the system restore folder. Of course, after you do this, you wouldn’t be able to do anymore system restores but I’ve never had to do one anyways so it works for me, shrug.
wrote on Mar 26, 2003 5:02 PM
I recently noticed that programs have been disappearing off my desktop. The next day, I noticed that now my briefcase icon was a “folder” icon so i opened it. I found that almost all my files had disappeared. I checked my recycle bin and it was not there either. I did a system restore to 2 weeks prior and the files are still missing. I also searched for some files on my harddrive and nothing is to be found. Today, I found that everything on my desktop including now my parents briefcase and my brothers briefcase were now also folders. I opened them to find that ALL of the files are gone. I updated my Norton and scanned. Norton found w32.HLLP.Handy and deleted the infected files but my files are still missing from my briefcases. WHAT DO I DO TO GET MY FILES BACK?
wrote on Mar 28, 2003 12:03 AM
i have just bought a new harddrive and istalled every thing i was downloading some file form kazaa i got the virus w32.hllp.handy, i have no clue how to get take it out any one have good advise…. that will help me a lots
thanks
wrote on Mar 31, 2003 1:05 AM
I got the same virus through Kazaa. I run Norton’s 2003 and it detected and repaired the file (not that I wanted it after NAV screamed at me). Best suggestion .. dont be cheap, buy the $29.99 Norton 2003 and be done with it all together.
wrote on Apr 9, 2003 11:25 AM
Hey, this virus appends itself to .exe files in the default Windows MIE 6.0 download directory and the Kazaa Download Directory all by it’s lonesome and then spreads from there. I opened a .rar file and noticed that my icons all immediately lost thier pictures. When I opened another folder, the same deal happened. I ran the Symantec virus check from their website, wrote down the name of the files infected. Then I opened task manager and trashed the running proccesses the virus had started (gibberish like fshhks.exe, etc.) Trashed the infected files, then installed NAV 2001, updated the virus definitons and NAV found and destroyed/repaired everything I missed. I then trashed the quarentined/repaiered files just to be safe. Whew!
wrote on Apr 14, 2003 12:12 AM
Here is the best way to get rid of this pesky virus (assuming you dont have Norton). First download the trial edition of F-Prot Antivirus. Do a full system scan (be sure to configure F-Prot to disinfect without confirmation) and sit back. F-Prot is the best virus program on the market. It doesnt kill your system resources like Norton and MacAffee. Check it out and read up on it- you will see.
wrote on Apr 22, 2003 1:42 AM
I just got a message saying Norton has detected the virus and taken care of it, now im doing a full system scan w/ new virus def’s. It was from a recently downloaded Kazaa file which is now deleted. What else can I do in the next few hours/days to keep it from spreading in case its not all clean yet?
wrote on Apr 28, 2003 10:34 PM
Hello, I need some help here, any would be severely appreciated. My other pc, next to this one , I have recently discovered I have the W32.HLLP.Handy virus. It was found after updating virus defs. I’m having an awful time trying to get rid of it, I Only noticed a problem because I could not move a video clip file from the download folder to another folder. It told me it was being used another person or program and it could not be moved. I rebooted several times. No change. I’ve lost sound on my pc as well. I’ve tried to reinstall it but nothing. I have tried to delete this file I can’t move and it can not move or delete , I can’t even qaurentine it with Norton, even though norton doesn’t find it. I’m so frustrated at this point and things look pretty helpless, if there is anyone that can help. PLEASE im me SleepingLights on AIM I’m so frustrated and can’t figure out how to get rid of this thing. HELP ;-(
wrote on Apr 30, 2003 12:11 PM
Some great things really are free. I found out I had the virus from a friend when i gave him a copy of some apps I got through Kazaa. My NAV didn’t even pick up on it. And when I tried to update my Norton virus definitions, it wouldn’t let me unless i paid up. Hmmmm, so I went to www.pccillin.com and ran their “house call” and it detected every infected file and also repaired them!!!! Norton isn’t the know-all tell-all… it’s PcCillin… PcCillin Rules!!! And “House call” is FREE!!!!
wrote on May 8, 2003 7:01 AM
i think that norton is bullshit it diddnt help me to remove the virus W32.HLLP.Handy
i tried to rescan it but diddnt help me think other
programmes like panda mcfee are much better and norton i think you should do sonmthing about your programe holla back
wrote on May 8, 2003 2:22 PM
ken,
i think Norton is the best anti-virus software, despite the fact that it wasn’t able to deal with my hllp.handy virus….
the best thing you can do is stay current with your updates, and upgrade every year.
But, that’s just my preference.
wrote on May 8, 2003 5:33 PM
I just removd Handy… but it’s wierd becaus I don’t use Kazaa ….. maybe I caught it from Direct Connect.
Anyway I dunno if it’s linked or not, but my hd starts behaving oddly (writing errors and messed up cluster). Urgh……
wrote on May 11, 2003 4:24 AM
lol this isnt even a very threatening virus, its quite simple, all you need is NAV. Restart your computer in safe mode, run NAV, update, scan, presto, virus is gone. This will take many hours depending on how many files you have. But it is crucial you do this IN SAFE MODE. Virus, atleast of this nature will not run in safe mode.
getting to safe mode: when the computer begins to start up, start pressing F8 alot, or esc. If all else fails, mash keys on start-up.
wrote on May 11, 2003 1:42 PM
This virus change the size of your file and make your driver running and running with no stopping, slowing down your computer. If you don’t have virus remover, start your system again and do not run the same file. It only start if you click on infected file.Before running any other program you have to run Norton 2 or 3 times(full search).Only one time you will still have the same virus.Delete the infected files found.This virus use to reactivate itself if you click on the same file.Use a clean copy from you disk.Delete file like Savenow00.exe, savenow001.exe and any file starting with JOI in windows\temp like Joi6, joi10 etc..Other virus popular in Kaaza is svchost.exe and ffhmdhboc.exe. Download a free antivirus here if you don’t have one: http://www.grisoft.com
Rodrigo
wrote on May 11, 2003 4:26 PM
Good advice, Jason. It hadn’t occured to me to try scanning in Safe Mode…
wrote on May 13, 2003 12:36 AM
i just got swat it (free prog) and it triggered norton antivirus that i had the handy virus……under XP bytheway
wrote on May 15, 2003 8:16 PM
Get this guys, I was downloading something from Kazaa when all of a sudden, my nortons caught this pesky little bug. It said that it repaired the file and that was that. I decided to also go to housecalls and run a online scan and nothing was detected. However, when rebooting the pc, it hung after detecting drives, rebooted again and got the same. I disabled my onboard lan and plugged in a new nic. I shut down for a few and booted up into windows2k but cannot browse. All my settings are correct and I am able to ping the gateway and this pc but, cannot browse. Any ideas on how to fix IE before I have to reformat???Thank you for any advice.
wrote on May 17, 2003 6:46 AM
Hello, I have been using kazaa until I downloaded a file which my fully updated Norton Antivirus 2003 detected as been w32.Handy or Hanteer. Apparently it managed to remove it and the damage it causes is very nil. I dont think so. Randomly my harddrive stops spinning often on boot up or when programs are loading. my red HDD light on the PC tower stays lit and no PC activity happens. Booting up this happens most often. I have a SECOND PC that seemed to of caught this virus again on kazaa and exactly the same things are happening to that PC #2. I have loading most recent version and virus definitions with bloodhound on maximum level, Ive run harddrive diagnostics from the manfacture (Western digital lifeguard tools) it reports absolutly no probleems at all. This is happening more and more often I really need help. I tryed reflashing my bios and that fixed it for abit but now its comming back again and its happening more often (Harddrive stops and red HDD lights up with no PC activity at all!!!) help its not hardware I dont think. Ive checked all the IDE cables and ATX power in the back of the harddrive and they are totally secure and fine. need help urgently
all chipset drivers are installeed ext.
30GB Western digital 7200RPM (Buffer?)
Abit KD7-E Motherboard with top version of bios.
wrote on May 20, 2003 4:21 PM
rite.. we have got a situation with the W32.HLLP.Handy virus. What we need to do is find the person responsible for this action and painfully hurt “it”… It’s really sad that people have to make viruses because they shall get a 5 year jail sentence and a 20 year computer ban. If anyone finds a solution please let me know as soon as possible. Thank You
wrote on May 23, 2003 3:14 PM
Okay…I just vanquished this bitch. I too was unable to access the file because it was in use or I did not have the right to access. So, I pulled up the trusty DOS prompt and deleted 1 2 3.
Have you hugged your DOS today?
wrote on May 26, 2003 12:57 PM
How did you do that? i got this damn virus last nite from something i started to d/l. i have the newest version of norton but it can’t fix, quarentine or delete it. i tried to manually delete it but that wouldn’t work either. it doesn’t look like it spread yet but i need to delete now! what am i supposed 2 do?
wrote on May 26, 2003 12:58 PM
How did you do that? i got this damn virus last nite from something i started to d/l off of kazaa. i have the newest version of norton but it can’t fix, quarentine or delete it. i tried to manually delete it but that wouldn’t work either. it doesn’t look like it spread yet but i need to delete now! what am i supposed 2 do?
wrote on May 27, 2003 3:24 PM
When Norton scans for the virus and eventually finds it, you can view the path. So, just write down the path and follow it from your DOS prompt (START, PROGRAMS, ACCESSORIES, COMAND PROMPT).
This will allow you to delete it, because it is not in use.
wrote on Jun 3, 2003 8:13 AM
yo dudes i just got rid of that virus. this is what i did. i sat around staring at my computer with was going slow due to the virus memory limitations then, i opened up a command prompt and started typing vulgar language in to it. then i decided to take my keyboard and set it on fire. it was sweet. it should me on my web site by the end of the month. well ne way i got rid of the virus by running norton like 10 times. they say its stealth.
wrote on Jun 7, 2003 4:51 PM
any one know what this virus really does?W32.HLLP.Handy
i just found it with NAV and i have had very little problems with my computer.
my one problem was/is all my network connections disapeard and my internet connection connets as a WAN Interface. it kinna sucks cuz i dont know how to disconnect with out restarting my system.(this may have nothing to do with the virus W32.HLLP.Handy.
But if any one know what it does to the system other than spread thro kazaa please let me know.
thanx.
wrote on Jun 17, 2003 1:17 AM
This is the 3rd virus spreaded through Kazaa. I will recommend everyone to unistall the program. Try WinMx sharing program instead.
For those who wants to know what the virus W32.HLLP.Handy does, is files in KaZaa shared folders grow in size. You Drive free space will be smaller and smaller. Then your system will be very slow and it will not normaly perform.
The best way to get rid of it is not to repair the infected files but to delete them.
For those who have problem with Norton, should do a Online virus scan. Try the following:
1. Desable System Restore
2. Restart your Computer
3. Run On line virus scan. go to> http://housecall.trendmicro.com/
(It is free) Let the scan DELETE the infected files. NOT TO REPAIR them.
Get rid of the Kazaa program, clear the shared folders or deleted them if you don’t need them. This way you will get back your free space.
4. Run Disk check and Disk difragmenter
5. Restart your Computer
6. Enable System Restore
7. Now update your own antivirus and run a fun scan to see what results you get.
Let us know if this works for you
Good Luck!!!
P Ares
wrote on Jun 21, 2003 12:36 AM
Ugh, this virus sucks donkey. I had a trojan and this pesky lil bug. I’ve already deleted it once but it is back even though I havn’t used kazaa since. I think it might’ve infected norton because norton is updated and still failing to be a good virus scanner. I’ve had the following oddities with my computer: Sound problems, my icons keep losing their..icons, my icons are scrambled-exe icon for jpeg, slows computer horribly, blue screens of death, POP UPS ;_;..Hopefully F-prot will kill it…forever.
wrote on Jun 22, 2003 6:58 AM
yeah something happened on my system that every time i turn off my computer it resets to default and my saved settings go back as to how they started, so it alway comes up and asks me if i what to take a tour and so that how i know that its reseting. please does any one have an idea what the hell is going on?
wrote on Jun 22, 2003 7:01 AM
i think i got it from kazaa!!
wrote on Jun 23, 2003 9:59 PM
I have three drives in my computer. I guess I got this file sometime using kaaza (just deleted the program!) and aparently two of my hard drives have failed on me? They’ve become Local Disks and when I try to open them windows asks me if I want to reformat them… I guess I had the w32.hllp.handy virus and this is probably what caused my hard drives to fail? I have no other viruses on my pc, just this one. Any idea, is there any way to get my data back on the 2 hard drives? Did it delete all my files or what the hell did it do? I have backup but I don’t want to reformat.
wrote on Jun 25, 2003 5:37 AM
just downloaded a file from kazaa, and my NAV detected this w32hllp.handy virus and repaired it right away. still to be safe i immediately stopped downloading the file, and removed the partially downloaded file from “my shared folder”. tried to do a full system scan, but then my computer froze…haven’t had any other problems besides that…
i did a search on google to learn more about the virus— and does anyone know why are there all these german sites that have something about “handy virus”?….i don’t speak german so maybe it’s just because handy means something in german, who knows.
wrote on Jun 25, 2003 3:43 PM
i was downloading a file off of kazaa and then my NAV (2002) told me right away that this w32.hllp handy virus was detected and fixed. still, to be sure i immediately stopped downloading the file from kazaa and deleted the .rar file from my shared folder. i ran a full system scan and nothing was detected….whew!
has anyone ever tried sending a message to the user who you downloaded the infected file from? maybe they don’t know they have the virus and it will just keep spreading to other people.
wrote on Jun 27, 2003 5:19 PM
so i hear some of yuo are havind a problem with w32.hllp handy virus. well first of all you need to know how you are gettin it.
W32.HLLP.Handy is a virus that prepends itself to the files in the KaZaA download folder and the Internet Explorer default download folder. It is written in the Borland Delphi programming language and is compressed with UPX.
Also Known As: W32/HLLP.Hantaner [McAfee], Win32.HLLP.Hantaner [KAV], PE_HANTANER.A [Trend], Win32.HLLP.Handy [CA], W32/Hantaner-A [Sophos]
Infection Length: 24,064 bytes
Systems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me
Systems Not Affected: Macintosh, OS/2, UNIX, Linux
now i am a student who is downloadin all the time. this little sh#% really does a number on your sysetm. let me tell you. if you dont catch it soon after it is on you system yuor in trouble. this little bugger will slow your system donw to a stand still.
what i do, and seem sto work for me is i have nortons anit 2003 pro. now i dout it matters if you have pro or not. mcafee will work also. but the key is to have it check your sytem EVERY DAY. if you are like me and have you pc hooked up and runnin all the time. set you virus scan so it scans every day at like 2am, or what ever time you arent on it. now if you turn you pc on and off all the time and every time you use it, like most people do, set you virus scan to scan every time you turn on your system, by doin one of these two you should have no problem with this virus. also, make sure you virus scan is runnin all the time when your pc is on. that will make it so you can get it as easy.
wrote on Jun 30, 2003 6:46 PM
almost got the handy virus again just now…same thing happened: Norton detected it and removed it right away. but this time i sent a message to the user who i downloaded the infected file from…i don’t know if it’ll do anything, but just to let the person know so maybe he/she will stop spreading it to other people.
wrote on Aug 26, 2003 6:47 AM
i got this gay lil virus but wiv me computer skills i got rid of the bastard in a jiffy
wrote on Sep 9, 2003 8:43 PM
Thanks for steering me to pccillin, housecall seems to be able to clean the files nicely, unlike NAV2003, which can clean 1 out of 20. A few comments- 1) I feel that some of you are over reacting. There is little need to delete a file that an antivirus successfully cleans. If you are worried, scan it again later to see if it is still clean. It certainly isn’t necessary to uninstall Kazaa! Especially if you have resource hogging NAV running in the background looking at every byte you access. I only even run a virus scanner on occasion when I have reason to believe I’m infected, and have only had a few viruses over the years. The only one that proved to be a problem is the one I talk about below, and NAV itself caused the problem. (I’m not recomending this to anyone, but it works for me.)
2) I hate NAV for so many reasons - it deletes files (without giving you a choice if you don’t set it correctly) so people who don’t know better trash out their OS by deleting system files, I had a trogan/virus once, can’t remember the name, but since NAV couldn’t clean it, it deleted it, in doing so acually triggered the virus so that no .exe could be executed. I was able to download a detect/remove program (from McAffee) made specifically for that virus that abolished it from my system, otherwise I was looking at a full format/reinstall, all thanks to NAV! It is unbelievably slow. It has the stupid little system tray icon that won’t go away unless you use task manager to kill all its proccess that are still running even though I have disabled Auto Protect. 3) Misinformed people have been saying for years that viruses had caused the HDD to die, or to make their computer unable to even POST. This was totally false then and probably still is. Only if it were to overwrite the BIOS or flash rom could this happen. (I have heard of bios viruses…). These problems are most likely just coincidence.
wrote on Sep 23, 2003 6:36 PM
Ahh this virus is not that bad actually it’s kinda funny it’s one of those viruses that just pisses you off a little bit and makes you very paranoid. I didn’t have to be in safe mode to remove it I just scanned my system while the virus with norton and it detected it and repaired it. I later went back and deleted the virus. I say take care of this the day you get it otherwise your fucked. It doesn’t destroy your sytem data but makes your comp run slowly it’s a pain in the ass.THATS A RUN ON SENTENCE FOR YA
wrote on Oct 3, 2003 6:10 AM
this is shite
wrote on Nov 23, 2003 5:57 PM
you need to restar your computer in safty mode then delet the file then geta firewall
wrote on Nov 27, 2003 11:18 AM
i am having a big problem. i want to format my pc, because i have a lot of virusses on my computer, and just want it clean. but i dont have a writer , so i cant backup. what do you guys think ? i really need all the files on my computer but i have to delete all of them. HELP ME PLEASE
thx, byebye
wrote on Nov 28, 2003 6:49 PM
I got this virus when accepting a file on MSN 6.1. Instantly my norton 2003, detected this virus and instantly deleted it. I advise everyone to have the newest virus dectecter, and update it as much as possible
wrote on Dec 17, 2003 10:19 AM
If you have the virus, if you have a virus program make notes of the files Handy has infected. Then make sure KaZaA if closed!!! Go to the download folder and delete the file(s). Run virus scan again for 2 days on the folders for IE DL and KaZaA DL 4 times a day. Call the doctor on the third day if you’re slow getting up.
Make sure to delete all the files that are in the process of downloading (the files with the long name that KaZaA is waiting to DL.
HANDY ANDY lost to the new boys in town.
wrote on Jan 14, 2004 4:39 PM
Ok everybody here’s the deal. I caught the virus also and it landed in my system restore files. I can’t stress this enough…JUST BECAUSE YOUR ANTI-VIRUS SOFTWARE SAYS THERE ARE NO VIRUSES, DOESN’T MEAN THERE AREN’T. I have Norton 2003 home edition. It warned me about it but never picked it up in a scan. I then went to the symantec site and ran the free “symantec security check” virus checker and it picked it up. If it ends up in your restore files like it did mine…simply deactivate system restore (which will delete your restore points), scan again from the site, and reactivate. Hope that helps somewhat and wasn’t too confusing.
wrote on Jan 24, 2004 2:23 AM
I need the svchost.exe antivirus please
wrote on Feb 13, 2004 9:47 PM
Regarding the W32.HLLP.Hantaner.A1 virus removal: I have Norton AV on this XP computer, but have a computer in the shop running Windows 98SE that will not run any .exe program by clicking on files in Windows Explorer or by clicking on icons of programs…..but WOULD RUN “.exe” files from the command line (START/RUN). Anyway, I installed a demo/trial copy of the latest antivirus software from http://www.leprechaun.com.au , an Australian company that I’ve been doing business with until recently, and ran it on the Windows 98SE computer. It discovered and removed several instances of the W32.HLLP.Hantaner.A1 virus. BTW, I looked through updated Norton AV virus list of viruses and there was NO listing for this virus in Norton’s database of virus “fingerprints”..
wrote on Mar 8, 2004 3:21 AM
hyi have a virus:win32/hllp.jeefo and i can’t escape,please help me
:(
wrote on Mar 28, 2004 6:03 AM
kazaa is the place for handy because it finds the kazza downloads and the internet download folders and adds itself to that so it spreads through kazza
wrote on May 9, 2004 9:25 AM
due to the same virus i formated c/drive and lost the kazaa lite install folder now im up shit creek without a paddle anyone got the install file so i dont have to buy one any help would be much appreciated
wrote on Jun 11, 2004 7:07 AM
I am screwed the Handy virus infected some files and now my computer wont start up! it only starts in safe mode..
And the files it infected i cant find anything about them onthe net..
there Joi***.TMP files…**** meanign it varies therewas 11 of them such as 1211,1212,31d4
HHELPPPPPPPPPPPPPPPEEELPPPPPPPPP
wrote on Jun 20, 2004 3:49 AM
I have jeefo virus and i want disinfect it without miss some application in my hard disk which i can’t obtain it again.
wrote on Aug 9, 2004 5:09 PM
Hey… anybody who can help me out to clean my files infected with Jeefo????? Pls. email me and let me know.
See ya!
Stanny
wrote on Sep 6, 2004 5:39 PM
I am dying…i have that Win32/HLLP.Jeefo. problem… Help please……. !!!!
wrote on Sep 10, 2004 10:13 PM
I have norton antivirus and when i do my full system scan it says i have 80 at risk files and when i choose to delete them, it says it couldnt delete them and asks if i want to exclude or skip them. please help me get these off my computer! email me!!!
wrote on Nov 16, 2004 11:02 AM
I installed norton internet security and it turn my Kazza lite of. anyone know how to turn it back on
Thanks
wrote on Dec 15, 2004 6:10 AM
I just figgered out that this virus has been made by a Belgian Girl of 17 years old, one of the first viruses in .net . tuff girl !