The Construct

I really appreciate Leerz’s work on the Noob.Killer tool (which has evolved from simply getting rid of the Taga Lipa Are virus to covering threats such as Baguio Strawberry). And I also appreciate him using my site for updates and announcements even if my site isn’t really a tech site.

Anyway, here’s another update to that famed tool of his. Aside from a few UI tweaks and added features, it now covers the following threats:

• Taga Lipa Are/Hacked By Godzilla (and it’s other Variants)
• Baguio Strawberry Worm
• Yahoo! Worm (Sohanad)
• Krag.exe (I’m Not The Only One)
• Destrukto
• w32dranyam
• Funny UST Scandal(Avi).exe
• SilentSoftech
• Knight
• VBS Capiz
• Thank You!! WinZip123
• iloveher.exe
• display monitor.exe
• ImgKulot (and it’s other variants)

Take note that some of these buggers haven’t been really addressed by bigwig security software companies like Norton, McAffee, and even the free AVG. So kudos and many thanks to Leerz for building something great and free for us Pinoys! Download and release details can be found on Leerz’s site.

Good ol’ wormkiller Leerz posted this a while ago. This is supposed to fix that darned Funny UST Virus that’s going around. Just follow the instructions after the cut.

(more…)

Other meanies have taken cue from that annoying Taga Lipa Are worm from months back and now we have this Baguio Strawberry worm making its rounds and plaguing our PCs. If you ever got this message “I am still waiting for the strawberry coming from my Baguio! Pls.. Help!,” that means you’re buggered once again.

In any case, our good friend Leerz is happy to help you guys out with this killer utility. He’s made these bunch of removal tools to clean them buggers out. I think it uses the same engine used by his famed Taga Lipa Are removal tool.

[link] remove.tla.hbg.tesi.lrz.txt

[link] NOOB_KILLER_JUICER.by.Leerz.p.zip
[link] NOOB_KILLER_JUICER.by.Leerz.u.zip

[link] KILL.[TA].TAGA.LIPA.NOOB.KILLER.by.Leerz.u.zip
[link] KILL.[TA].TAGA.LIPA.NOOB.KILLER.by.Leerz.zip

[link] NOOB_KILLER.by.Leerz.u.zip
[link] NOOB_KILLER.by.Leerz.zip

————-USAGE—————-

Run ‘NOOB_KILLER_JUICER.by.Leerz.p.exe’ or
‘NOOB_KILLER_JUICER.by.Leerz.u.exe’

Click the ‘Advanced Noob Kill’
on the New Window, Click ” ‘StrawBerry Juicer’ [Beta]“

This Killer is still in BETA so if you would please try it out and leave some feedback if it works. For more details, check this post on the Convergence forums.

I’ve seen some computers affected by this “virus” and sadly, I think it’s not detected by Norton or AVG.

Here’s a guide on how to remove it. Kudos to SHENGTON of the PCX Forums.

1. Run Task Manager
Windows XP(Press Ctrl+Shift+Esc)
or CTRL + ALT + DEL then look for the “processes” tab, hanapin nyo un process na may name na “Wscript” end process nyo LAHAT.
2. On windows Explorer
Select TOOLS -> Folder Options tapos sa VIEW tab under “hidden files and folders” select nyo show hidden files and folders
next, uncheck hide protected operating system files
3. Browse nyo lahat nang disk drives or flashdrives nyo
( wag double click kasi magrun ulit un “wscript”) look for
“autorun.inf” and “FS6519.dll.vbs”
tapos delete nyo un 2 files, select nyo both files and press shift+delete be sure na lahat ng wscript sa task manager nka-end task.
4. Lastly, (sa wakas huling step)click start and select run, type nyo “regedit” press ctrl+F search nyo un “taga lipa are” i think 3 beses nyo sya makita, duouble click nyo un then replace it
with “Microsoft Internet Explorer” (pwede rin name nyo.. hehe..) 3 un mapapalitan nyo jan.. then exit nyo na..thats it!! restart ur PC and then OK na ulit..

Great tip, I just hate his use of “un.” “Un” is “hun” without the “H” (Kapapangan? :p) “Jan” is the abbreviation of “January.”