Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I recently helped a friend of mine install AVG and run some on-line scans of his computer. He got an alert about a virus called: win32/hamtaner.A He got it off kaaza, and there was no more info on it. AVG cleaned or repaired almost all he found but this one and I have done a search on this site and google as well and can find nothing on this - Anyone?

W32/Hantaner-A: It is a harmless nonmemory resident parasitic Win32 virus.
____________________________
The greatest risk is not taking one

devilsharleygirl
This is what Norton calles that virus:
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllp.handy.html
Most of the files infected will not be able to be cleaned...they will need to be deleted. You may end up replacing infected files from known clean backup.
Apparently the virus just infects kazaa's shared folder and IE's download folder.
Tell your friend to quit running kazaa till cleaned up...he/she is spreading the virus thru the shared folder.
The infected files will be in kazaa'a shared folder and whatever folder(s)are used when downloading stuff from IE.
Do the scan with kazaa completely shut off so infected files are not in use by someone uploading them.
Preferably run the scan in safe mode/offline. (tap f8 at boot)After cleanout...if he/she is running Win ME/XP...don't forget to disable system restore...windows locks the restore folder from mdification from programs including antivirus...so they cant be fixed.
Only way to clean restore is to disable it, reboot, rescan, if clean then re-enable restore. Windows may have backed up infected files risking re-infection if infected restore point used.More info here:
How to disable/enable Windows ME restore:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239?OpenDocument&src=sec_doc_nam
How to disable/enable XP restore:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam
Let me know if further help is needed.
___________________________________I never give up!

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |