handlesys.exe - Dangerous
handlesys.exe
Manual removal instructions:
Antivirus Report of handlesys.exe:
handlesys.exe
Trojan.StartPage.C is a variant of Trojan.StartPage.
It changes the Internet Explorer home page to www.okww.net.
Copies itself to one of the following locations:
%System%\uewxdir.exe
%System%\handlesys.exe
Adds the value: "HandleSystem"="%System%\handlesys.exe"
to the registry keys HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Changes the value to: "(Default)"="%System%\uewxdir.exe "%1""
to the registry keys HKEY_CLASSES_ROOT\txtfile\shell\open\command
so that the Trojan runs when you open a text file.
Adds the value: "Start Page"="http:/ /www.okww.net/"
to the registry key: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
For manual removal, please delete all values in the registry keys described above.
| handlesys.exe | Malware |
| handlesys.exe | Dangerous |
| handlesys.exe | High Risk |
It changes the Internet Explorer home page to www.okww.net.
Copies itself to one of the following locations:
%System%\uewxdir.exe
%System%\handlesys.exe
Adds the value: "HandleSystem"="%System%\handlesys.exe"
to the registry keys HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Changes the value to: "(Default)"="%System%\uewxdir.exe "%1""
to the registry keys HKEY_CLASSES_ROOT\txtfile\shell\open\command
so that the Trojan runs when you open a text file.
Adds the value: "Start Page"="http:/ /www.okww.net/"
to the registry key: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
For manual removal, please delete all values in the registry keys described above.
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.