DavidR
2
This is the virus that you are happy to leave on your computer because it’s not really doing any harm, other that infecting other computers when you use P2P.
Win32/HLLP.Hantaner.A is a virus spreading via infected files in P2P environment of KaZaA net. The virus is written in Delphi, and in order decreasing its length comprised by UPX. Comprised virus length is approximately 24 KB. Virus attacks computers with operating systems Windows 95/98/Me/NT/2000 and XP.
NOD32 detects the non-comprised version of Win32/HLLP.Hantaner.A virus as Win32/HLLP.Hantaner.A.unp.
After the infected file is run Win32/HLLP.Hantaner.A uses the system register for finding the directory where KaZaA saves downloaded files. It uses for this purpose the key HKEY_CURRENT_USER\Software\Kazaa\Transfer\DownloadDir. Virus is also searching for the directory used by Internet Explorer browser for saving of downloaded files from Internet… It accomplishes this using the key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download Directory.
It infects the files in above given directories placing its body at the beginning of those.
The virus creates the file named tnKXfs.dat on the disk in the directory %windir%\TEMP.
NO virus is harmless other than the Eicar test and the sooner people learn that their infected computers can infect others. Generally here, we give advice in how to remove viruses not how to ignore them.