So, to go along with the problems Suckahs has been experiencing in the past 72 hours, I’ve got a virus on my computer, and I’m spending my sleeping hours trying to clean it up. I need to purchase Norton Internet Security I think. What a mess.

45 Responses to “W32.HLLP.Handy”

  • ken,
    i think Norton is the best anti-virus software, despite the fact that it wasn’t able to deal with my hllp.handy virus….

    the best thing you can do is stay current with your updates, and upgrade every year.

    But, that’s just my preference.

  • I just removd Handy… but it’s wierd becaus I don’t use Kazaa ….. maybe I caught it from Direct Connect.
    Anyway I dunno if it’s linked or not, but my hd starts behaving oddly (writing errors and messed up cluster). Urgh……

  • lol this isnt even a very threatening virus, its quite simple, all you need is NAV. Restart your computer in safe mode, run NAV, update, scan, presto, virus is gone. This will take many hours depending on how many files you have. But it is crucial you do this IN SAFE MODE. Virus, atleast of this nature will not run in safe mode.

    getting to safe mode: when the computer begins to start up, start pressing F8 alot, or esc. If all else fails, mash keys on start-up.

  • This virus change the size of your file and make your driver running and running with no stopping, slowing down your computer. If you don’t have virus remover, start your system again and do not run the same file. It only start if you click on infected file.Before running any other program you have to run Norton 2 or 3 times(full search).Only one time you will still have the same virus.Delete the infected files found.This virus use to reactivate itself if you click on the same file.Use a clean copy from you disk.Delete file like Savenow00.exe, savenow001.exe and any file starting with JOI in windows\temp like Joi6, joi10 etc..Other virus popular in Kaaza is svchost.exe and ffhmdhboc.exe. Download a free antivirus here if you don’t have one: http://www.grisoft.com

  • Good advice, Jason. It hadn’t occured to me to try scanning in Safe Mode…

  • i just got swat it (free prog) and it triggered norton antivirus that i had the handy virus……under XP bytheway

  • Get this guys, I was downloading something from Kazaa when all of a sudden, my nortons caught this pesky little bug. It said that it repaired the file and that was that. I decided to also go to housecalls and run a online scan and nothing was detected. However, when rebooting the pc, it hung after detecting drives, rebooted again and got the same. I disabled my onboard lan and plugged in a new nic. I shut down for a few and booted up into windows2k but cannot browse. All my settings are correct and I am able to ping the gateway and this pc but, cannot browse. Any ideas on how to fix IE before I have to reformat???Thank you for any advice.

  • Hello, I have been using kazaa until I downloaded a file which my fully updated Norton Antivirus 2003 detected as been w32.Handy or Hanteer. Apparently it managed to remove it and the damage it causes is very nil. I dont think so. Randomly my harddrive stops spinning often on boot up or when programs are loading. my red HDD light on the PC tower stays lit and no PC activity happens. Booting up this happens most often. I have a SECOND PC that seemed to of caught this virus again on kazaa and exactly the same things are happening to that PC #2. I have loading most recent version and virus definitions with bloodhound on maximum level, Ive run harddrive diagnostics from the manfacture (Western digital lifeguard tools) it reports absolutly no probleems at all. This is happening more and more often I really need help. I tryed reflashing my bios and that fixed it for abit but now its comming back again and its happening more often (Harddrive stops and red HDD lights up with no PC activity at all!!!) help its not hardware I dont think. Ive checked all the IDE cables and ATX power in the back of the harddrive and they are totally secure and fine. need help urgently
    all chipset drivers are installeed ext.
    30GB Western digital 7200RPM (Buffer?)
    Abit KD7-E Motherboard with top version of bios.

  • rite.. we have got a situation with the W32.HLLP.Handy virus. What we need to do is find the person responsible for this action and painfully hurt “it”… It’s really sad that people have to make viruses because they shall get a 5 year jail sentence and a 20 year computer ban. If anyone finds a solution please let me know as soon as possible. Thank You

  • Okay…I just vanquished this bitch. I too was unable to access the file because it was in use or I did not have the right to access. So, I pulled up the trusty DOS prompt and deleted 1 2 3.

    Have you hugged your DOS today?

  • How did you do that? i got this damn virus last nite from something i started to d/l. i have the newest version of norton but it can’t fix, quarentine or delete it. i tried to manually delete it but that wouldn’t work either. it doesn’t look like it spread yet but i need to delete now! what am i supposed 2 do?

  • How did you do that? i got this damn virus last nite from something i started to d/l off of kazaa. i have the newest version of norton but it can’t fix, quarentine or delete it. i tried to manually delete it but that wouldn’t work either. it doesn’t look like it spread yet but i need to delete now! what am i supposed 2 do?

  • When Norton scans for the virus and eventually finds it, you can view the path. So, just write down the path and follow it from your DOS prompt (START, PROGRAMS, ACCESSORIES, COMAND PROMPT).

    This will allow you to delete it, because it is not in use.

  • yo dudes i just got rid of that virus. this is what i did. i sat around staring at my computer with was going slow due to the virus memory limitations then, i opened up a command prompt and started typing vulgar language in to it. then i decided to take my keyboard and set it on fire. it was sweet. it should me on my web site by the end of the month. well ne way i got rid of the virus by running norton like 10 times. they say its stealth.

  • any one know what this virus really does?W32.HLLP.Handy
    i just found it with NAV and i have had very little problems with my computer.
    my one problem was/is all my network connections disapeard and my internet connection connets as a WAN Interface. it kinna sucks cuz i dont know how to disconnect with out restarting my system.(this may have nothing to do with the virus W32.HLLP.Handy.
    But if any one know what it does to the system other than spread thro kazaa please let me know.

  • This is the 3rd virus spreaded through Kazaa. I will recommend everyone to unistall the program. Try WinMx sharing program instead.
    For those who wants to know what the virus W32.HLLP.Handy does, is files in KaZaa shared folders grow in size. You Drive free space will be smaller and smaller. Then your system will be very slow and it will not normaly perform.
    The best way to get rid of it is not to repair the infected files but to delete them.
    For those who have problem with Norton, should do a Online virus scan. Try the following:

    1. Desable System Restore

    2. Restart your Computer

    3. Run On line virus scan. go to> http://housecall.trendmicro.com/
    (It is free) Let the scan DELETE the infected files. NOT TO REPAIR them.
    Get rid of the Kazaa program, clear the shared folders or deleted them if you don’t need them. This way you will get back your free space.

    4. Run Disk check and Disk difragmenter

    5. Restart your Computer

    6. Enable System Restore

    7. Now update your own antivirus and run a fun scan to see what results you get.

    Let us know if this works for you
    Good Luck!!!

    P Ares

  • Ugh, this virus sucks donkey. I had a trojan and this pesky lil bug. I’ve already deleted it once but it is back even though I havn’t used kazaa since. I think it might’ve infected norton because norton is updated and still failing to be a good virus scanner. I’ve had the following oddities with my computer: Sound problems, my icons keep losing their..icons, my icons are scrambled-exe icon for jpeg, slows computer horribly, blue screens of death, POP UPS ;_;..Hopefully F-prot will kill it…forever.

  • yeah something happened on my system that every time i turn off my computer it resets to default and my saved settings go back as to how they started, so it alway comes up and asks me if i what to take a tour and so that how i know that its reseting. please does any one have an idea what the hell is going on?

  • i think i got it from kazaa!!

  • I have three drives in my computer. I guess I got this file sometime using kaaza (just deleted the program!) and aparently two of my hard drives have failed on me? They’ve become Local Disks and when I try to open them windows asks me if I want to reformat them… I guess I had the w32.hllp.handy virus and this is probably what caused my hard drives to fail? I have no other viruses on my pc, just this one. Any idea, is there any way to get my data back on the 2 hard drives? Did it delete all my files or what the hell did it do? I have backup but I don’t want to reformat.

  • just downloaded a file from kazaa, and my NAV detected this w32hllp.handy virus and repaired it right away. still to be safe i immediately stopped downloading the file, and removed the partially downloaded file from “my shared folder”. tried to do a full system scan, but then my computer froze…haven’t had any other problems besides that…

    i did a search on google to learn more about the virus– and does anyone know why are there all these german sites that have something about “handy virus”?….i don’t speak german so maybe it’s just because handy means something in german, who knows.

  • i was downloading a file off of kazaa and then my NAV (2002) told me right away that this w32.hllp handy virus was detected and fixed. still, to be sure i immediately stopped downloading the file from kazaa and deleted the .rar file from my shared folder. i ran a full system scan and nothing was detected….whew!

    has anyone ever tried sending a message to the user who you downloaded the infected file from? maybe they don’t know they have the virus and it will just keep spreading to other people.

  • so i hear some of yuo are havind a problem with w32.hllp handy virus. well first of all you need to know how you are gettin it.

    W32.HLLP.Handy is a virus that prepends itself to the files in the KaZaA download folder and the Internet Explorer default download folder. It is written in the Borland Delphi programming language and is compressed with UPX.

    Also Known As: W32/HLLP.Hantaner [McAfee], Win32.HLLP.Hantaner [KAV], PE_HANTANER.A [Trend], Win32.HLLP.Handy [CA], W32/Hantaner-A [Sophos]

    Infection Length: 24,064 bytes
    Systems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me
    Systems Not Affected: Macintosh, OS/2, UNIX, Linux

    now i am a student who is downloadin all the time. this little sh#% really does a number on your sysetm. let me tell you. if you dont catch it soon after it is on you system yuor in trouble. this little bugger will slow your system donw to a stand still.

    what i do, and seem sto work for me is i have nortons anit 2003 pro. now i dout it matters if you have pro or not. mcafee will work also. but the key is to have it check your sytem EVERY DAY. if you are like me and have you pc hooked up and runnin all the time. set you virus scan so it scans every day at like 2am, or what ever time you arent on it. now if you turn you pc on and off all the time and every time you use it, like most people do, set you virus scan to scan every time you turn on your system, by doin one of these two you should have no problem with this virus. also, make sure you virus scan is runnin all the time when your pc is on. that will make it so you can get it as easy.

  • almost got the handy virus again just now…same thing happened: Norton detected it and removed it right away. but this time i sent a message to the user who i downloaded the infected file from…i don’t know if it’ll do anything, but just to let the person know so maybe he/she will stop spreading it to other people.

  • i got this gay lil virus but wiv me computer skills i got rid of the bastard in a jiffy

  • Thanks for steering me to pccillin, housecall seems to be able to clean the files nicely, unlike NAV2003, which can clean 1 out of 20. A few comments- 1) I feel that some of you are over reacting. There is little need to delete a file that an antivirus successfully cleans. If you are worried, scan it again later to see if it is still clean. It certainly isn’t necessary to uninstall Kazaa! Especially if you have resource hogging NAV running in the background looking at every byte you access. I only even run a virus scanner on occasion when I have reason to believe I’m infected, and have only had a few viruses over the years. The only one that proved to be a problem is the one I talk about below, and NAV itself caused the problem. (I’m not recomending this to anyone, but it works for me.)
    2) I hate NAV for so many reasons – it deletes files (without giving you a choice if you don’t set it correctly) so people who don’t know better trash out their OS by deleting system files, I had a trogan/virus once, can’t remember the name, but since NAV couldn’t clean it, it deleted it, in doing so acually triggered the virus so that no .exe could be executed. I was able to download a detect/remove program (from McAffee) made specifically for that virus that abolished it from my system, otherwise I was looking at a full format/reinstall, all thanks to NAV! It is unbelievably slow. It has the stupid little system tray icon that won’t go away unless you use task manager to kill all its proccess that are still running even though I have disabled Auto Protect. 3) Misinformed people have been saying for years that viruses had caused the HDD to die, or to make their computer unable to even POST. This was totally false then and probably still is. Only if it were to overwrite the BIOS or flash rom could this happen. (I have heard of bios viruses…). These problems are most likely just coincidence.

  • Ahh this virus is not that bad actually it’s kinda funny it’s one of those viruses that just pisses you off a little bit and makes you very paranoid. I didn’t have to be in safe mode to remove it I just scanned my system while the virus with norton and it detected it and repaired it. I later went back and deleted the virus. I say take care of this the day you get it otherwise your fucked. It doesn’t destroy your sytem data but makes your comp run slowly it’s a pain in the ass.THATS A RUN ON SENTENCE FOR YA

  • this is shite

  • you need to restar your computer in safty mode then delet the file then geta firewall

  • i am having a big problem. i want to format my pc, because i have a lot of virusses on my computer, and just want it clean. but i dont have a writer , so i cant backup. what do you guys think ? i really need all the files on my computer but i have to delete all of them. HELP ME PLEASE
    thx, byebye

  • I got this virus when accepting a file on MSN 6.1. Instantly my norton 2003, detected this virus and instantly deleted it. I advise everyone to have the newest virus dectecter, and update it as much as possible

  • If you have the virus, if you have a virus program make notes of the files Handy has infected. Then make sure KaZaA if closed!!! Go to the download folder and delete the file(s). Run virus scan again for 2 days on the folders for IE DL and KaZaA DL 4 times a day. Call the doctor on the third day if you’re slow getting up.

    Make sure to delete all the files that are in the process of downloading (the files with the long name that KaZaA is waiting to DL.

    HANDY ANDY lost to the new boys in town.

  • Ok everybody here’s the deal. I caught the virus also and it landed in my system restore files. I can’t stress this enough…JUST BECAUSE YOUR ANTI-VIRUS SOFTWARE SAYS THERE ARE NO VIRUSES, DOESN’T MEAN THERE AREN’T. I have Norton 2003 home edition. It warned me about it but never picked it up in a scan. I then went to the symantec site and ran the free “symantec security check” virus checker and it picked it up. If it ends up in your restore files like it did mine…simply deactivate system restore (which will delete your restore points), scan again from the site, and reactivate. Hope that helps somewhat and wasn’t too confusing.

  • I need the svchost.exe antivirus please

  • Regarding the W32.HLLP.Hantaner.A1 virus removal: I have Norton AV on this XP computer, but have a computer in the shop running Windows 98SE that will not run any .exe program by clicking on files in Windows Explorer or by clicking on icons of programs…..but WOULD RUN “.exe” files from the command line (START/RUN). Anyway, I installed a demo/trial copy of the latest antivirus software from http://www.leprechaun.com.au , an Australian company that I’ve been doing business with until recently, and ran it on the Windows 98SE computer. It discovered and removed several instances of the W32.HLLP.Hantaner.A1 virus. BTW, I looked through updated Norton AV virus list of viruses and there was NO listing for this virus in Norton’s database of virus “fingerprints”..

  • hyi have a virus:win32/hllp.jeefo and i can’t escape,please help me

  • kazaa is the place for handy because it finds the kazza downloads and the internet download folders and adds itself to that so it spreads through kazza

  • due to the same virus i formated c/drive and lost the kazaa lite install folder now im up shit creek without a paddle anyone got the install file so i dont have to buy one any help would be much appreciated

  • I am screwed the Handy virus infected some files and now my computer wont start up! it only starts in safe mode..

    And the files it infected i cant find anything about them onthe net..

    there Joi***.TMP files…**** meanign it varies therewas 11 of them such as 1211,1212,31d4


  • I have jeefo virus and i want disinfect it without miss some application in my hard disk which i can’t obtain it again.

  • Hey… anybody who can help me out to clean my files infected with Jeefo????? Pls. email me and let me know.

    See ya!

  • I am dying…i have that Win32/HLLP.Jeefo. problem… Help please……. !!!!

  • I have norton antivirus and when i do my full system scan it says i have 80 at risk files and when i choose to delete them, it says it couldnt delete them and asks if i want to exclude or skip them. please help me get these off my computer! email me!!!

  • I installed norton internet security and it turn my Kazza lite of. anyone know how to turn it back on


  • I just figgered out that this virus has been made by a Belgian Girl of 17 years old, one of the first viruses in .net . tuff girl !

Comments are currently closed.