Question on virus W32.HLLP.

Sorry guys, this probably isn't supposed to go here but I just signed up for this site today. I was wondering if there was any info on the virus W32.HLLP.Handy. I've gotten it twice so far but both times my virus scan caught it. I am also having another problem. My computer restarts itself frequently. It only happens when I'm using aol instant messanger so I think it has to do with that. I will be sitting there and as soon as I get up to move it restarts. I'm not very good with computers but my friend is and he checked something called MSCONFIG and cheked to see if anything strange was there and there wasn't. I do have a couple of friends who are good with computers and I know they can make my computer restart but I'm really not sure if there doing it or not. Please help me.

Hrmm.. A couple of things come to mind. First, you might want to visit MooSoft and download the Cleaner. It sounds like you might have a trojan. Also, make sure your antivirus is up-to-date and runs when the machine boots.

Second, make sure you have the latest version of AIM. That said, go through the AIM preference and disable any default uploads or what-have-you. Ideally, it would be better if you didn't use AIM as it is problematic (IMHO).

Fleet, check this link out from McAfee's Virus Information Library: http://vil.nai.com/vil/content/v_99881.htm

That should get you some more information about the virus itself. Also, a simple search on Google should give you plenty of information to read about..

As far as your other problems go, you may want to run a complete viruscan (after your DAT files are up to date), run a trojan detection/cleaner (such as The Cleaner from www.moosoft.com), and a general clean up of your system. It's possible that your machine has been exploited and you need to get rid of whatever junk is out there.. When you say that your 'friends' can make your PC restart, how? Are you online, doing something specific, etc?


EDIT: Ah, MsMittens, looks like we posted at the same time - you beat me to it though!

OK, it looks like your virus is related to Kazaa:

http://securityresponse.symantec.com...llp.handy.html

As for the restarting issue, it sounds like one of your friends might be playing a prank on you. One of them may have sent you a trojan, and they're restarting your computer just to mess with you.

Think back and see if you remember any of your buddies sending you a small file that seemed to do nothing.

I've seen Windows XP do that on an Emachine before.

that "virus" is definately related to kazaa. Some of the software kazaa makes u install for the program to work is spy and adware, that particular "virus" is used by a program in kazaa, and just isnt liked by most firewalls and antivirus because it does some **** it shouldnt.

Since a few have mentioned Kazaa: Fleet, are you currently using some version of the Kazaa software? If you are, you may want to reconsider that at least until you get your system cleaned up.

At this point, you really need to get up-to-date with your AV software - if you don't have any AV software, you need to accquire some. There are free solutions and some that cost minimal amounts of money - just do a search on AntiOnline, these subjects have been talked about before and good information has been provided.

Thanks for all the help guys I apprecitate it. As for kazaa, yes I am using it and I am pretty sure thats where the virus came from. The first time I got it, norton antivirus showed where it was from and im pretty sure that was it.

As for my computer automatically restariting, I am using windows XP but it only happens when I'm on aim. One of you asked how my friends could do it and I'm pretty sure they can somehow, but I don't know if its them. I have done virus scans and nothing had came up, only this one from kazaa. Also, when I had one of my friends chek the MSCONFIG thing, he said he didn't anything strange. I will look into these links and I'm pretty sure I'm just going to get rid of kazaa all together. Again thanks for the help and if you know anything about my computer restarting on its own please continue to post.

~Fleet

Yeah.. Kazaa is pretty much a zoo for viruses... try using WINMX or IMESH

Oh by the way... if it only happens when yo use aol instant messenger you might want to uninstall it for a while just to see if that is what is causeing the program... otherwise it could be your hardware or something.

Well, first of all, I got rid of kazaa for good. Secondly, I downloaded the trail version of "The Cleaner" from www.moosoft. com and it found 33 trojans. All were called the trojan BDE. I'm hoping that was what was making my computer restart. Again, thanks for the help.

~Fleet

It happened again, my computer shut down on its own. The wierd thing is, it only happens when I go to stand up. I have a rolling chair, and it seems like whenever it hits the metal leg of my table, it happens. I could be completely wrong about this but this is what I am thinking. The chair rolls on the carpet which makes static electricity. Then when I get up, it hits the leg of the table causing the static to, if you will, "discharge". Could that possibly be an issue of making my computer shut down. It's the only thing I can possibly think of and it seems reasonable to me. Hopefully I'm not sounding like a complete moron to you guys and if I am I don't mean to be. My computer knowledge is basically html and the insides of a computer. I know that static can affect your computer. Let me know if you think this good be it or if I'm just an idiot.

~Fleet

You might want to check the power cable cord and see how tightly it's connected. It sounds like it might be loose. Is your computer connected directly to the wall or to a power surge bar?

Its connected to a power strip but I'm not sure if it's surge protected. I know its not a loose connection because I have unplugged my computer several times and it still always happens. It could be a break in a wire or something. I'm really not sure. You don't think it could be that static thing? The reason I thought of that is because people sometimes have antistatic mats under there computer chairs. If you don't know what I'm talking about read the post I made before this one.

I read your post. While static can be an issue (especially in a dry environment) I don't know if it's yours. When you mentioned it happens when you get up, do you feel a static discharge? If not, then I would think it's something else. Maybe the power bar has a defect.

What about the power supply? Maybe it's not fully connected and movement is causing it to disconnect.

Ya I feel the static charge sometimes. That's what first made me think of it. I felt the chair zap my hands.

hi fleet .. i think i know about W32.HLLP.Handy ... and have you find the anti for this ?

i have tips for you mate :

1). Do not open any files attached to an email from an unknown, suspicious or untrustworthy source.

2). Do not open any files attached to an email unless you know what it is, even if it appears to come from a dear friend or someone you know. Some viruses can replicate themselves and spread through email. Better be safe than sorry and confirm that they really sent it.

3). Do not open any files attached to an email if the subject line is questionable or unexpected.

4). Delete chain emails and junk email. Do not forward or reply to any to them. These types of email are considered spam, which is unsolicited, intrusive mail that clogs up the network.

5). Do not download any files from strangers.

6). Exercise caution when downloading files from the Internet. Ensure that the source is a legitimate and reputable one. Verify that an anti-virus program checks the files on the download site. If you're uncertain, don't download the file at all or download the file to a floppy and test it with your own anti-virus software.

7). Update your anti-virus software regularly. Over 200 viruses are discovered each month, so you'll want to be protected.

8). Back up your files on a regular basis. If a virus destroys your files, at least you can replace them with your back-up copy.

9). When in doubt, always err on the side of caution and do not open, download, or execute any files or email attachments.

yess .. WIN32.HLLP.Handy could came from kazaalite .. Always keep virus scan up to date to make sure it will not come again and i am quiet sure it can restart your computer , and many ppl who infected by W32.HLLP.Handy, their system started acted weird .. browser windows, Task Manager, and Norton 2002 were being closed. i suggest you to get the McAfee ver. 7.0 the viruses is also known as the folowing:
Name
MultiDropper-EX
W32.HLLP.Handy (NAV)
W32/HLLP.Hantaner.A (F-Prot)
Win32.HLLP.Hantaner (AVP)

or Norton 2003 , better try it mate .... if it doesn't work ( i'm sure it works ) the only way to shuttle it is reinstall ur XP.

Good Luck

You may want to check to see if your power supply is functioning properly. I know my PC was restarting all the time when my PSU started dying.

About the W32.HLLP.Handy. Its funny you mention emails. I thought it was kazaa but a wierd thing has been happening with my emails to. I am a administrator for a webpage and I have a special email for it. There are several admins and all of us have been recieving strange emails. Outlook Express opens them automatically on me. The wierd thing about these emails is, they are all from different people, but they all have the same message with 2 files attached. One appeared to be a webpage, it had the IE icon but it wasnt. The other one was a file. All the emails say "This is a good tool, I hope you like it". Some of the admins for this site get as much to 20-30 of these a day. Ive gotten 4 of these emails. None of us know what to do to prevent this. That could be what gave me the W32.HLLP.Handy because I know that has to be a virus.

there are so many possibilties where W32.HLLP.handy came from .

Quote:

---

2). Do not open any files attached to an email unless you know what it is, even if it appears to come from a dear friend or someone you know. Some viruses can replicate themselves and spread through email. Better be safe than sorry and confirm that they really sent it.
3). Do not open any files attached to an email if the subject line is questionable or unexpected.
4). Delete chain emails and junk email. Do not forward or reply to any to them. These types of email are considered spam, which is unsolicited, intrusive mail that clogs up the network.
5). Do not download any files from strangers.
6). Exercise caution when downloading files from the Internet. Ensure that the source is a legitimate and reputable one. Verify that an anti-virus program checks the files on the download site. If you're uncertain, don't download the file at all or download the file to a floppy and test it with your own anti-virus software

---

could be from kazaa .

Quote:

---

yess .. WIN32.HLLP.Handy could came from kazaalite

---

.

Quote:

---

and i am quiet sure it can restart your computer , and many ppl who infected by W32.HLLP.Handy, their system started acted weird .. browser windows, Task Manager, and Norton 2002 were being closed.

---

i suggested you to try .

Quote:

---

McAfee ver. 7.0 the viruses is also known as the folowing: Name
MultiDropper-EX
W32.HLLP.Handy (NAV)
W32/HLLP.Hantaner.A (F-Prot)
Win32.HLLP.Hantaner (AVP)
or Norton 2003

---

.

could be anything and there is a way to solve it .

:)

OMG 33 Trojons... It scares me when I have only one... but 33? Good luck with your computer problems dude... You might want to check how many things you have plugged into your outlet you use for your computer too. Weird things can happen when there are electrical problems.