W32.HLLP.Handy

So, to go along with the prob­lems Suck­ahs has been expe­ri­enc­ing in the past 72 hours, I’ve got a virus on my com­puter, and I’m spend­ing my sleep­ing hours trying to clean it up. I need to pur­chase Norton Inter­net Secu­rity I think. What a mess.

95 Responses to “W32.HLLP.Handy”


  • ken,
    i think Norton is the best anti-​virus soft­ware, despite the fact that it wasn’t able to deal with my hllp.handy virus….

    the best thing you can do is stay cur­rent with your updates, and upgrade every year.

    But, that’s just my preference.

  • I just removd Handy… but it’s wierd becaus I don’t use Kazaa ….. maybe I caught it from Direct Con­nect.
    Anyway I dunno if it’s linked or not, but my hd starts behav­ing oddly (writ­ing errors and messed up clus­ter). Urgh……

  • lol this isnt even a very threat­en­ing virus, its quite simple, all you need is NAV. Restart your com­puter in safe mode, run NAV, update, scan, presto, virus is gone. This will take many hours depend­ing on how many files you have. But it is cru­cial you do this IN SAFE MODE. Virus, atleast of this nature will not run in safe mode.

    get­ting to safe mode: when the com­puter begins to start up, start press­ing F8 alot, or esc. If all else fails, mash keys on start-​up.

  • This virus change the size of your file and make your driver run­ning and run­ning with no stop­ping, slow­ing down your com­puter. If you don’t have virus remover, start your system again and do not run the same file. It only start if you click on infected file.Before run­ning any other pro­gram you have to run Norton 2 or 3 times(full search).Only one time you will still have the same virus.Delete the infected files found.This virus use to reac­ti­vate itself if you click on the same file.Use a clean copy from you disk.Delete file like Savenow00.exe, savenow001.exe and any file start­ing with JOI in windows\temp like Joi6, joi10 etc..Other virus pop­u­lar in Kaaza is svchost.exe and ffhmdhboc.exe. Down­load a free antivirus here if you don’t have one: http://www.grisoft.com
     Rodrigo

  • Good advice, Jason. It hadn’t occured to me to try scan­ning in Safe Mode…

  • i just got swat it (free prog) and it trig­gered norton antivirus that i had the handy virus……under XP bytheway

  • Get this guys, I was down­load­ing some­thing from Kazaa when all of a sudden, my nor­tons caught this pesky little bug. It said that it repaired the file and that was that. I decided to also go to house­calls and run a online scan and noth­ing was detected. How­ever, when reboot­ing the pc, it hung after detect­ing drives, rebooted again and got the same. I dis­abled my onboard lan and plugged in a new nic. I shut down for a few and booted up into windows2k but cannot browse. All my set­tings are cor­rect and I am able to ping the gate­way and this pc but, cannot browse. Any ideas on how to fix IE before I have to reformat???Thank you for any advice.

  • Hello, I have been using kazaa until I down­loaded a file which my fully updated Norton Antivirus 2003 detected as been w32.Handy or Hanteer. Appar­ently it man­aged to remove it and the damage it causes is very nil. I dont think so. Ran­domly my hard­drive stops spin­ning often on boot up or when pro­grams are load­ing. my red HDD light on the PC tower stays lit and no PC activ­ity hap­pens. Boot­ing up this hap­pens most often. I have a SECOND PC that seemed to of caught this virus again on kazaa and exactly the same things are hap­pen­ing to that PC #2. I have load­ing most recent ver­sion and virus def­i­n­i­tions with blood­hound on max­i­mum level, Ive run hard­drive diag­nos­tics from the man­fac­ture (West­ern dig­i­tal life­guard tools) it reports abso­lutly no prob­leems at all. This is hap­pen­ing more and more often I really need help. I tryed reflash­ing my bios and that fixed it for abit but now its com­ming back again and its hap­pen­ing more often (Hard­drive stops and red HDD lights up with no PC activ­ity at all!!!) help its not hard­ware I dont think. Ive checked all the IDE cables and ATX power in the back of the hard­drive and they are totally secure and fine. need help urgently
    all chipset dri­vers are installeed ext.
    30GB West­ern dig­i­tal 7200RPM (Buffer?)
    Abit KD7-E Moth­er­board with top ver­sion of bios.

  • rite.. we have got a sit­u­a­tion with the W32.HLLP.Handy virus. What we need to do is find the person respon­si­ble for this action and painfully hurt “it”… It’s really sad that people have to make viruses because they shall get a 5 year jail sen­tence and a 20 year com­puter ban. If anyone finds a solu­tion please let me know as soon as pos­si­ble. Thank You

  • Okay…I just van­quished this bitch. I too was unable to access the file because it was in use or I did not have the right to access. So, I pulled up the trusty DOS prompt and deleted 1 2 3.

    Have you hugged your DOS today?

  • How did you do that? i got this damn virus last nite from some­thing i started to d/l. i have the newest ver­sion of norton but it can’t fix, quar­en­tine or delete it. i tried to man­u­ally delete it but that wouldn’t work either. it doesn’t look like it spread yet but i need to delete now! what am i sup­posed 2 do?

  • How did you do that? i got this damn virus last nite from some­thing i started to d/l off of kazaa. i have the newest ver­sion of norton but it can’t fix, quar­en­tine or delete it. i tried to man­u­ally delete it but that wouldn’t work either. it doesn’t look like it spread yet but i need to delete now! what am i sup­posed 2 do?

  • When Norton scans for the virus and even­tu­ally finds it, you can view the path. So, just write down the path and follow it from your DOS prompt (START, PRO­GRAMS, ACCES­SORIES, COMAND PROMPT).

    This will allow you to delete it, because it is not in use.

  • yo dudes i just got rid of that virus. this is what i did. i sat around star­ing at my com­puter with was going slow due to the virus memory lim­i­ta­tions then, i opened up a com­mand prompt and started typing vulgar lan­guage in to it. then i decided to take my key­board and set it on fire. it was sweet. it should me on my web site by the end of the month. well ne way i got rid of the virus by run­ning norton like 10 times. they say its stealth.

  • any one know what this virus really does?W32.HLLP.Handy
    i just found it with NAV and i have had very little prob­lems with my com­puter.
    my one prob­lem was/is all my net­work con­nec­tions dis­a­peard and my inter­net con­nec­tion con­nets as a WAN Inter­face. it kinna sucks cuz i dont know how to dis­con­nect with out restart­ing my system.(this may have noth­ing to do with the virus W32.HLLP.Handy.
    But if any one know what it does to the system other than spread thro kazaa please let me know.
     thanx.

  • This is the 3rd virus spreaded through Kazaa. I will rec­om­mend every­one to unistall the pro­gram. Try WinMx shar­ing pro­gram instead.
    For those who wants to know what the virus W32.HLLP.Handy does, is files in KaZaa shared fold­ers grow in size. You Drive free space will be smaller and smaller. Then your system will be very slow and it will not nor­maly per­form.
    The best way to get rid of it is not to repair the infected files but to delete them.
    For those who have prob­lem with Norton, should do a Online virus scan. Try the following:

    1. Desable System Restore

    2. Restart your Computer

    3. Run On line virus scan. go to> http://housecall.trendmicro.com/
    (It is free) Let the scan DELETE the infected files. NOT TO REPAIR them.
    Get rid of the Kazaa pro­gram, clear the shared fold­ers or deleted them if you don’t need them. This way you will get back your free space.

    4. Run Disk check and Disk difragmenter

    5. Restart your Computer

    6. Enable System Restore

    7. Now update your own antivirus and run a fun scan to see what results you get.

    Let us know if this works for you
     Good Luck!!!

    P Ares

  • Ugh, this virus sucks donkey. I had a trojan and this pesky lil bug. I’ve already deleted it once but it is back even though I havn’t used kazaa since. I think it might’ve infected norton because norton is updated and still fail­ing to be a good virus scan­ner. I’ve had the fol­low­ing odd­i­ties with my com­puter: Sound prob­lems, my icons keep losing their..icons, my icons are scrambled-​exe icon for jpeg, slows com­puter hor­ri­bly, blue screens of death, POP UPS ;_;..Hope­fully F-prot will kill it…forever.

  • yeah some­thing hap­pened on my system that every time i turn off my com­puter it resets to default and my saved set­tings go back as to how they started, so it alway comes up and asks me if i what to take a tour and so that how i know that its reset­ing. please does any one have an idea what the hell is going on?

  • i think i got it from kazaa!!

  • I have three drives in my com­puter. I guess I got this file some­time using kaaza (just deleted the pro­gram!) and aparently two of my hard drives have failed on me? They’ve become Local Disks and when I try to open them win­dows asks me if I want to refor­mat them… I guess I had the w32.hllp.handy virus and this is prob­a­bly what caused my hard drives to fail? I have no other viruses on my pc, just this one. Any idea, is there any way to get my data back on the 2 hard drives? Did it delete all my files or what the hell did it do? I have backup but I don’t want to reformat.

  • just down­loaded a file from kazaa, and my NAV detected this w32hllp.handy virus and repaired it right away. still to be safe i imme­di­ately stopped down­load­ing the file, and removed the par­tially down­loaded file from “my shared folder”. tried to do a full system scan, but then my com­puter froze…haven’t had any other prob­lems besides that…

    i did a search on google to learn more about the virus – and does anyone know why are there all these german sites that have some­thing about “handy virus”?….i don’t speak german so maybe it’s just because handy means some­thing in german, who knows.

  • i was down­load­ing a file off of kazaa and then my NAV (2002) told me right away that this w32.hllp handy virus was detected and fixed. still, to be sure i imme­di­ately stopped down­load­ing the file from kazaa and deleted the .rar file from my shared folder. i ran a full system scan and noth­ing was detected….whew!

    has anyone ever tried send­ing a mes­sage to the user who you down­loaded the infected file from? maybe they don’t know they have the virus and it will just keep spread­ing to other people.

  • so i hear some of yuo are havind a prob­lem with w32.hllp handy virus. well first of all you need to know how you are gettin it.

    W32.HLLP.Handy is a virus that prepends itself to the files in the KaZaA down­load folder and the Inter­net Explorer default down­load folder. It is writ­ten in the Bor­land Delphi pro­gram­ming lan­guage and is com­pressed with UPX.

    Also Known As: W32/HLLP.Hantaner [McAfee], Win32.HLLP.Hantaner [KAV], PE_HANTANER.A [Trend], Win32.HLLP.Handy [CA], W32/Hantaner-A [Sophos]

    Infec­tion Length: 24,064 bytes
    Sys­tems Affected: Win­dows 95, Win­dows 98, Win­dows NT, Win­dows 2000, Win­dows XP, Win­dows Me
    Sys­tems Not Affected: Mac­in­tosh, OS/2, UNIX, Linux

    now i am a stu­dent who is down­loadin all the time. this little sh#% really does a number on your sysetm. let me tell you. if you dont catch it soon after it is on you system yuor in trou­ble. this little bugger will slow your system donw to a stand still.

    what i do, and seem sto work for me is i have nor­tons anit 2003 pro. now i dout it mat­ters if you have pro or not. mcafee will work also. but the key is to have it check your sytem EVERY DAY. if you are like me and have you pc hooked up and runnin all the time. set you virus scan so it scans every day at like 2am, or what ever time you arent on it. now if you turn you pc on and off all the time and every time you use it, like most people do, set you virus scan to scan every time you turn on your system, by doin one of these two you should have no prob­lem with this virus. also, make sure you virus scan is runnin all the time when your pc is on. that will make it so you can get it as easy.

  • almost got the handy virus again just now…same thing hap­pened: Norton detected it and removed it right away. but this time i sent a mes­sage to the user who i down­loaded the infected file from…i don’t know if it’ll do any­thing, but just to let the person know so maybe he/she will stop spread­ing it to other people.

  • i got this gay lil virus but wiv me com­puter skills i got rid of the bas­tard in a jiffy

  • Thanks for steer­ing me to pccillin, house­call seems to be able to clean the files nicely, unlike NAV2003, which can clean 1 out of 20. A few comments- 1) I feel that some of you are over react­ing. There is little need to delete a file that an antivirus suc­cess­fully cleans. If you are wor­ried, scan it again later to see if it is still clean. It cer­tainly isn’t nec­es­sary to unin­stall Kazaa! Espe­cially if you have resource hog­ging NAV run­ning in the back­ground look­ing at every byte you access. I only even run a virus scan­ner on occa­sion when I have reason to believe I’m infected, and have only had a few viruses over the years. The only one that proved to be a prob­lem is the one I talk about below, and NAV itself caused the prob­lem. (I’m not recomend­ing this to anyone, but it works for me.)
    2) I hate NAV for so many rea­sons – it deletes files (with­out giving you a choice if you don’t set it cor­rectly) so people who don’t know better trash out their OS by delet­ing system files, I had a trogan/virus once, can’t remem­ber the name, but since NAV couldn’t clean it, it deleted it, in doing so acually trig­gered the virus so that no .exe could be exe­cuted. I was able to down­load a detect/remove pro­gram (from McAf­fee) made specif­i­cally for that virus that abol­ished it from my system, oth­er­wise I was look­ing at a full format/reinstall, all thanks to NAV! It is unbe­liev­ably slow. It has the stupid little system tray icon that won’t go away unless you use task man­ager to kill all its proc­cess that are still run­ning even though I have dis­abled Auto Pro­tect. 3) Mis­in­formed people have been saying for years that viruses had caused the HDD to die, or to make their com­puter unable to even POST. This was totally false then and prob­a­bly still is. Only if it were to over­write the BIOS or flash rom could this happen. (I have heard of bios viruses…). These prob­lems are most likely just coincidence.

  • Ahh this virus is not that bad actu­ally it’s kinda funny it’s one of those viruses that just pisses you off a little bit and makes you very para­noid. I didn’t have to be in safe mode to remove it I just scanned my system while the virus with norton and it detected it and repaired it. I later went back and deleted the virus. I say take care of this the day you get it oth­er­wise your fucked. It doesn’t destroy your sytem data but makes your comp run slowly it’s a pain in the ass.THATS A RUN ON SEN­TENCE FOR YA

  • this is shite

  • you need to restar your com­puter in safty mode then delet the file then geta firewall

  • i am having a big prob­lem. i want to format my pc, because i have a lot of virusses on my com­puter, and just want it clean. but i dont have a writer , so i cant backup. what do you guys think ? i really need all the files on my com­puter but i have to delete all of them. HELP ME PLEASE
    thx, byebye

  • I got this virus when accept­ing a file on MSN 6.1. Instantly my norton 2003, detected this virus and instantly deleted it. I advise every­one to have the newest virus dec­tecter, and update it as much as possible

  • If you have the virus, if you have a virus pro­gram make notes of the files Handy has infected. Then make sure KaZaA if closed!!! Go to the down­load folder and delete the file(s). Run virus scan again for 2 days on the fold­ers for IE DL and KaZaA DL 4 times a day. Call the doctor on the third day if you’re slow get­ting up.

    Make sure to delete all the files that are in the process of down­load­ing (the files with the long name that KaZaA is wait­ing to DL.

    HANDY ANDY lost to the new boys in town.

  • Ok every­body here’s the deal. I caught the virus also and it landed in my system restore files. I can’t stress this enough…JUST BECAUSE YOUR ANTI-VIRUS SOFT­WARE SAYS THERE ARE NO VIRUSES, DOESN’T MEAN THERE AREN’T. I have Norton 2003 home edi­tion. It warned me about it but never picked it up in a scan. I then went to the syman­tec site and ran the free “symantec secu­rity check” virus checker and it picked it up. If it ends up in your restore files like it did mine…simply deac­ti­vate system restore (which will delete your restore points), scan again from the site, and reac­ti­vate. Hope that helps some­what and wasn’t too confusing.

  • I need the svchost.exe antivirus please

  • Regarding the W32.HLLP.Hantaner.A1 virus removal: I have Norton AV on this XP com­puter, but have a com­puter in the shop run­ning Win­dows 98SE that will not run any .exe pro­gram by click­ing on files in Win­dows Explorer or by click­ing on icons of programs…..but WOULD RUN “.exe” files from the com­mand line (START/RUN). Anyway, I installed a demo/trial copy of the latest antivirus soft­ware from http://www.leprechaun.com.au , an Aus­tralian com­pany that I’ve been doing busi­ness with until recently, and ran it on the Win­dows 98SE com­puter. It dis­cov­ered and removed sev­eral instances of the W32.HLLP.Hantaner.A1 virus. BTW, I looked through updated Norton AV virus list of viruses and there was NO list­ing for this virus in Norton’s data­base of virus “fingerprints”..

  • hyi have a virus:win32/hllp.jeefo and i can’t escape,please help me
     :(

  • kazaa is the place for handy because it finds the kazza down­loads and the inter­net down­load fold­ers and adds itself to that so it spreads through kazza

  • due to the same virus i for­mated c/drive and lost the kazaa lite install folder now im up shit creek with­out a paddle anyone got the install file so i dont have to buy one any help would be much appreciated

  • I am screwed the Handy virus infected some files and now my com­puter wont start up! it only starts in safe mode..

    And the files it infected i cant find any­thing about them onthe net..

    there Joi***.TMP files…**** meanign it varies there­was 11 of them such as 1211,1212,31d4

    HHELPPPPPPPPPPPPPPPEEELPPPPPPPPP

  • I have jeefo virus and i want dis­in­fect it with­out miss some appli­ca­tion in my hard disk which i can’t obtain it again.

  • Hey… any­body who can help me out to clean my files infected with Jeefo????? Pls. email me and let me know.

    See ya!
     Stanny

  • I am dying…i have that Win32/HLLP.Jeefo. problem… Help please……. !!!!

  • I have norton antivirus and when i do my full system scan it says i have 80 at risk files and when i choose to delete them, it says it couldnt delete them and asks if i want to exclude or skip them. please help me get these off my com­puter! email me!!!

  • I installed norton inter­net secu­rity and it turn my Kazza lite of. anyone know how to turn it back on

    Thanks

  • I just fig­gered out that this virus has been made by a Bel­gian Girl of 17 years old, one of the first viruses in .net . tuff girl !

Comments are currently closed.