February 24, 2007 | In: Computers

Taga Lipa Are removal tool

Since I posted a fix for that Taga Lipa Are virus, I got this e-mail from this guy called Leerz. And he wants to publicize his removal tool.

I haven’t verified this tool yet. But I downloaded it, scanned it with 3 anti-viruses and 2 anti-spywares, and found negative results for infections. I’ve yet to fully check it. Anyway, he’s posted this in the Convergence Forums with details on what it does.

Now I don’t want to be responsible for any harm that may be done on your machines. So download and use at your own risk. Anyway, I’ve corresponded with Leerz over IM and he swears by his work (he seems like a very nice guy).

Here’s the link to download.

Check out these other posts:

Tags: Computers

65 Responses to Taga Lipa Are removal tool

Azrael

February 25th, 2007 at 10:25 am

salamat sa pag post nito!

Marcus Tee

March 7th, 2007 at 1:26 am

It works big time!!!

allergicgal

March 8th, 2007 at 1:23 am

the tool remover works! thank you! wait, i just clicked the Autofix-Kill
TLA, and then restarted my pc. that’s it, right? im just verifying.
what’s the Kill- HBG for?

oikid!!

March 8th, 2007 at 5:04 am

sir ang galing po ng program nyo!! natangal na po ung wurm!! maraming salamat po!!!

Alex

March 8th, 2007 at 5:36 am

Let’s all thank Leerz for that. I’m just the one who got the word out. That Autofix option’s supposed to do the trick.

Arcbane27

March 9th, 2007 at 12:35 am

maraming salamat! Leerz!

JigsFx

March 12th, 2007 at 10:45 pm

Lupet mo Leerz.. idol kita..

aNoNymous

March 14th, 2007 at 11:26 pm

awesome tool!!! very effective in just one click.. good job dude

kath

March 22nd, 2007 at 10:50 pm

uh, may error daw COMCTL32.OCX not registered correctly

Alex

March 23rd, 2007 at 5:49 am

@kath I’ll try to get in touch with Leerz with that. But I suspect that’s with your OS. The program’s written in Visual Basic, I believe it uses OCXs to be able to function. I hope I can get back to you on that.

jinitro

April 2nd, 2007 at 6:50 pm

dko problem taga lipa,yung kasama nya problem ko yung system volume
information at desktop nakakalat na sa lahat ng folder ko.my alam ba
ba kyo na short cut para madelete ito.marami kc kong folders 250gb
hardrive ko puno ito.thanx in advance.peace!

Alex

April 3rd, 2007 at 6:37 am

@jinitro, try using your usual anti-virus software for that one. Yung Taga Lipa Are, matatanggal na nitong removal tool na ito. Except for the OCX registry issue, okay siya. May mga librang anti-virus software. Try AVG, by experience mas gusto ko siya kaysa sa Norton.

jinitro

April 3rd, 2007 at 6:52 am

thanx po sir alex,na solve ko na po hidden files po pala mga ito hindi
virus kaya pala lumitaw din nung opoen ko hidden.deep freeze po gamit ko
nakadisable kc nung nakuha ko.baguhan plang kc sa pc nagreresearch pag d
alam.puyat lng katapat.thanx dude,guess i have to try another virus
to learn again.

Glen Melvin

April 3rd, 2007 at 10:24 am

Magaling!

jinitro

April 3rd, 2007 at 12:44 pm

i’m back my wish is granted,my virus naman ung isa kong pc nadedelete pero
bumabalik nagtry ako na show ang hidden pero bumabalik sa hide.try ko rin
task mngr pero ayaw mag open.mga icons ko nagfafade ang color.anyone
familiar w/ this virus?nagcocopy sya ng icon tapos GameSetup nakalagay
147kb nya or bk nag iiba rin.virus kaya to mga sir or mam.wala pa namang
akong napapansing disorder sa pc ko kundi yung fading lang.lumilipat pag
denelete.huh haba!

Alex

April 3rd, 2007 at 4:52 pm

@jinitro: It’s a spyware/trojan. Better get a anti-spyware like Ad-Aware or Spybot Search and Destroy. After you’ve cleaned your system, make sure you have an anti-virus, firewall, anti-spyware installed.

macao

April 4th, 2007 at 9:57 am

x.$$$ lam ba nio ito???

RenjiZ ChrZantheMum

April 14th, 2007 at 2:29 pm

Babalik pa kaya ang TAGA LIPA ARE! virus sa computer? hmmm

sndloader

April 20th, 2007 at 4:30 pm

yes it works thanks!

Raiven

April 22nd, 2007 at 8:15 pm

i found a program that removes the autorun.vbs and maskrider virus… is this safe? please comment on this ASAP… heres the program KILLGODZILLA by jiraw@msn…

irene

May 20th, 2007 at 10:00 pm

wow! this tool really work! amazing! thanks a lot!

rennielboy

June 12th, 2007 at 7:42 pm

halleluya!

The Construct by Alex Maximo - Commentaries on social media discourse - : Baguio Strawberry worm removal tool (BETA)

June 17th, 2007 at 7:01 pm

[...] meanies have taken cue from that annoying Taga Lipa Are worm from months back and now we have this Baguio Strawberry worm making its rounds and plaguing [...]

Nilo

June 21st, 2007 at 9:24 am

Kaya rin ba tanggalin nito yung “Taga AUP Ako —v—o—d—a–” virus?

Alex

June 21st, 2007 at 11:17 am

Try it. It might work on the varieties of the virus.

VISTA EXPERT

June 24th, 2007 at 1:17 pm

i don’t think that this tool would always save the day..
for nube, it’s ok.

VISTA EXPERT

June 24th, 2007 at 1:21 pm

“Kaya rin ba tanggalin nito yung “Taga AUP Ako —v—o—d—a–” virus?”
I don’t think so…

rotceH

August 1st, 2007 at 2:46 pm

matatanggal din ba yung FS6519.VBS.DLL bug…?

RANJIT

August 7th, 2007 at 6:29 am

wow yuuuhooooo terriffic … it worked …… thankxxx a looooot

jay2fox

August 24th, 2007 at 8:35 pm

it’s similar to “Hacked by Godzilla” worm, can it also remove MS32DLL.dll.vbs virus???

ginky

August 31st, 2007 at 4:06 pm

pde rin b neto maremove ung strwberry from baguio virus?

goio

September 23rd, 2007 at 12:28 pm

thanks for the program, it really helped!!! rock on!!!

Baxter

October 21st, 2007 at 4:00 am

Can somebody please help. I have read everything but the link at the top of the page for the download does not seem to work. It just states that it cant find the webpage.

Dennis

November 6th, 2007 at 8:43 pm

help naman po may bagong virus yung UST Funny scandal.avi.exe kasama nya yung smss.exe

sana matulungan nyo ko kasi kahit yung taga lipa anti virus di matanggal…

Vida Soraya

November 8th, 2007 at 9:07 am

Hello! The links above are apparently broken. Do you have any other download source for the Taga Lipa Are removal tool? Many thanks and God bless you…

Jeyps

November 10th, 2007 at 1:52 pm

hi! I have the file, what’s your email address and I’ll send it to you.

Jeyps

Ramesis

November 11th, 2007 at 12:58 am

how about the funny ust scandal? my pc is infected with it… i could really use some help.
i tried the tool posted, doesn’t seem to work on me.

Dhenz

November 13th, 2007 at 10:56 am

Patulong nmn po ako pasend ng taga lipa removal tool meron po kc virus ung pc ko eh di ko po matanggal Funny UST Scandal.avi.exe ung virus baka alam nyo po kng pano matanggal to salamat po…:)

Dhenz

November 13th, 2007 at 10:57 am

pasend na lng po sa email ko ung taga lipa removal tool kng meron po kau eto po email add ko. xyrus_27@yahoo.com salamat po ng marami…)

Stef

November 13th, 2007 at 4:41 pm

pwedng pasend din sa email q?… Hindi kc gumagana ung link…
Lageng nag-eerror… e2 email add q… scrumptious_parfait@yahoo.com…
Thank you so much… =D

pogi

November 14th, 2007 at 1:43 pm

HOW TO REMOVE FUNNY USt scandal virii!!!
_________________________________________

What a lame virus……peace…!!!!! MABUHAY ANG LIPA(Lipa City Public College)F.E.S
Before I teach you how to remove this… first… this is the information
of that virus….

Software used to build the virus= AutoIt V3
drop Files- killer.exe(4084 kb) in c:\windows\
lsass.exe(3920kb) in c:\documents and settings\all users\start menu\programs\startup
smss.exe(4088kb) in all root drives and in c:\windows
autorun.inf(1kb) in all root drives with a script

[autorun]
open=smss.exe
shell\Open\Command=smss.exe
shell\open\Default=1
shell\Explore\Command=smss.exe
shell\Autoplay\command=smss.exe

Funny UST Scandal.avi.exe(228kb) in all root drives

Registry Entries-HKLM\Software\Microsoft\WindowNT\CurrentVersion\Winlogon=shell(killer.exe)
HKCU\Software\Microsoft\windows\Currentversion\Run=runonce(c:\windows\smss.exe)

HOw to remove this lame virus????

-first download taskiller in http://www.rsdsoft.com/task_killer/index.php4 and install it to
your computer because you cant use taskmanager to terminate the virus(the virus automatically close taskmanager).

-run taskiller and left click it on the system tray(the one with a skull icon)

-click processes

-to close the virus, select process and click yes to the question

(process to close)
1.killer.exe
2.lsass.exe
3.smss.exe

note: close only file that have the same icon of Funny UST Scandal.avi.exe

CMD STEPS
1-now, click “start” then “run”
2-type “cmd” without quotes
3-type “cd\” without quotes
4-type “attrib -h -s smss.exe” without quotes
5-type “attrib -h -s autorun.inf” without quotes
6-type “start c:” without quotes(a new window will open)
7-select smss.exe,autorun.inf,Funny UST Scandal.avi.exe and delete it

-if theres any drive or a partition type “d:” in command prompt without quotes
“d” is the drive letter then repeat the CMD STEPS number 4-7 above…….

-now type this on the command prompt “cd windows” without quotes(na naman!)
-type “attrib -h -s smss.exe” without quotes(uli)
-type “start c:\windows” without quotes(hay naku!)
-delete the file smss.exe
-now, goto c:\documents and settings\all users\startmenu\programs\startup
-delete lsass.exe

-click “start” then “run”
-type “regedit” without quotes then delete the registry entries above….

-thats all!!!!!! MABUHAY ANG LIPA(6519)

question??? email me at: six519@yahoo.com

Note:
Magtatagalog na ako.. hirap na akong mag english……
Kapag nagkaproblema kau sa pagoopen ng drives sa mycomputer open
nyo lang uli ang regedit tpos find nyo lang ang “smss.exe”
tpos burahin nyo ung mga value na katulad nito—>>”c:\smss.exe”,”d:\smss.exe” etc…..
ok?????

Dhenz

November 14th, 2007 at 2:04 pm

Try ko po to gawin maya sa computer ko bwisit na virus to pinahirapan ako ng husto…:(

pogi

November 15th, 2007 at 3:39 pm

TRY THIS EASY REMOVER OF FUNNY UST VIRUS
LINK… http://www.geocities.com/six519/Remover.zip

3ncrypt0

November 15th, 2007 at 8:27 pm

nice remover.. thanks …

3ncrypt0

November 15th, 2007 at 8:55 pm

i downloaded it and it work but i havent find any complication on my system execp when i check the registry
i found some killer.exe on the registry

My Computer\HCU\Software\Microsoft\Search Assistant\AcMru\5603

a string value killer.exe
will i delete it??

pogi

November 16th, 2007 at 10:59 am

its up 2 u……..
kung hindi ako nagkakamali kaya nagkavalue ng ganyan sa registry e nagfile search ka(killer.exe)………. pero ok lang na huwag mo burahin.. wala na nman ung virus sa system e…. tsaka ingat sa pagmomodify ng registry…… it will crash ur system…….

lucena young IT's

November 24th, 2007 at 10:25 pm

tnx. cool……. thanks a lot mga boss…

Leerz

November 26th, 2007 at 8:12 pm

#Funny UST [Noob.Killer] Update

Again, with the storming news with the Funny UST [Sudden rush of people reporting it]

I was more than inspired to work on something,
I’ve been watching this Funny UST virus a few months back (when the reports where minimal)
those times, there were no CONCRETE information about it,

what’s interesting is the filesize,
there were reports that the ‘FUNNY UST XXX.XXX File’ was merely less than 300kb
and then the other host files, xmss, smss, lsass, killer, which were approx 3-4mb(4084 kb) , can anyone support this?

that’s really confusing, I mean, for a virus to reach those lengths,
anyhow,

I’ve researched enough, and with help from Sophos securities websites,
and of course, the present fixes to the said malware,
I was able to come up with an update for the noob.Killer

it scans for the the following files
xmass, killer, smass, funny ust /avi, lsass on various critical folders (and even folders which weren’t reported)

the thing is that, before removing the files, you have to terminate some processes on your tasks first, in order to do this, now, with that, there is a high probability that the user might terminate some critical system components, to prevent this, I’ve wrote an algorithm embedded in the noob.killer to do this efficiently,

not only it will close the task, it WILL also, do a smart check on reported infected files, for example, smass, and lsass, are valid windoez processes, merely closing them from the task could spell disaster, what more for deleting them, which some have suggested (to search the computer and delete the said files).

anyhow, unlike most of the noob.killer releases, this version will automatically restar your system (so it’s really important that you save all your work first, before even running the scan [or before even running the noob killer]).

the documentation is still unfinished, but the update is ready,
so enough blabber, and on with the Show

here are the links,

http://leerz25.sitesled.com/files/tools/fixes/NOOB_KILLER_JUC.SOH.FUST.by.Leerz.u.zip
http://leerz25.sitesled.com/files/tools/NOOB_KILLER_JUCSOHAD.by.Leerz.u.zip
http://leerz25.sitesled.com/files/tools/NOOB_KILLER.by.Leerz.u.zip
http://leerz25.sitesled.com/files/tools/NOOB_KILLER.by.Leerz.zip

just run and click ‘FUNNY UST’

noticed that I made some visual revamping with the new XP styles

if you have any questions with regards to any of my works, do mail me, or post here.

Cheers

-Leerz
Viva Las Filipinas!

simply_anne

November 29th, 2007 at 2:32 am

salamat sa site na ito… got rid of this funny ust scandal na to… more blessings sa mga tumulong

Eugene

February 19th, 2008 at 11:33 pm

hey this tool worked. removed that piece of shit virus. thanks lots.

fufatdex

April 6th, 2008 at 5:03 pm

SALAMAT! MAAYOS NA LAPTOP NAMIN >>> PATI EXTERNAL HARDISK AYOS NA>>

MAY ISA PANG VIRUS N NAIWAN “INFOSTEALER.LINEAGE” bka may sagot sa virus n to?

Lol

May 8th, 2008 at 10:43 pm

Fuck you.

Lol

May 8th, 2008 at 10:43 pm

FUCKING PIECE OF SHIT, THIS TOOL DIDNT WORK!!

Gabriela Ivascu

May 17th, 2008 at 3:00 am

I am from Romania and i have a hard problem with Funny UST. You hepl me. Thanks a lot.

Deceneu

May 28th, 2008 at 6:13 pm

Thank you very much. You are the best. After I spend hours to understand and eliminate this joke, in just a few seconds your program did it. 10x again

Sumsar

June 1st, 2008 at 1:49 pm

IdOL LeErZ Genius ka tALaGa ., Sana maimprove mo pa ng maLupit yong Ginawa mong removal tOoL para laHat ng virus paktay! para kahit mg u o bit torrent at lime wire ako siguradong malinis din ang maaupload ko.,GBlEz U, All.,

jfc

October 7th, 2008 at 3:09 pm

the removal worked. thanks.

lynjosh

October 7th, 2008 at 9:22 pm

it works!!! wow amazing anti-taga lipa are is remove from my USB, i scanned it already with nod32 and avira but it wasnt remove

rafael

October 15th, 2008 at 2:11 pm

sir ang galing ng leers tapos ng prob. ko!!!

rafael

October 15th, 2008 at 2:14 pm

sir may prob. ako sa OS ko bigla na lng ng rereboot,,posible b ang virus dun? bk alam nyo po ang paraan,,thnks in advance

oliver

November 28th, 2008 at 12:59 pm

mga bro! gudpm! bkit ayaw gumana ng taga lipa sa laptop ko, naka vista home basic ako pero dun desktop ko sa xp gumagana nman sya dun. ano po ba problema nun?