FTalk

FTalk

Welcome guest! Please Login or Register.

#21  2007-06-21 09:23:47

Ephemeral
 Forgotten
Ephemeral's display avatar
» Moderator
FTalk Level: HARDCORE!
ModeratorNovice PromoterConversationalistFTalkers ♥♥ My Threads!Top PosterSome FTalkers ♥ Me!
Anonymous
Class-S
Naught
11894
434
Website

Re: Taga Lipa are?? Are you familiar?

I think the Taga Lipa Are is a virus spead on YM?  :wallbash:

Last edited by Ephemeral (2007-06-21 09:25:17)

#22  2007-06-21 15:52:06

Freelance6969
 Angel Mari
Freelance6969's display avatar
» FTalkAgent
FTalk Level: zero
FTalkers ♥♥ My Threads!
Fired Moderator ;=)
Class X
hells kitchen
2273
37
2009-11-18
Website

Re: Taga Lipa are?? Are you familiar?

Yup .. din .. but i dont think its the taga lipa are.. BEWARE OF THE LINKS .. that you see like photo vacations .. new pics.. ... all it did to me when i clicked the link was .my username sent messages like " FU ALL .. to all in my messengers list together with a link attached to it .. so just Be careful guys "  :eh:

Last edited by Freelance6969 (2007-06-21 15:52:36)


WUBBY!i love you so uber much , i know that i sound really really corny that i tell you a million million times a day and i wont stop because i will always feel that way for you , wub  , your my inspiration , your my all , my life revolves around our adventures , wubbb , i want to hug you right now . . . . i feel mushyyyyy  hihihi , love you so much wub !!!!

#23  2008-01-02 05:27:19

dynamicfriendsterwebmastr
» FTalker
FTalk Level: zero
245
2
2008-09-09

Re: Taga Lipa are?? Are you familiar?

to solve ur problem. better use firefox instead! hehehe

#24  2008-01-31 02:33:17

sicq
 Mycu
sicq's display avatar
» FTalkAddict
FTalk Level: zero
NoTimeForPosting
416
1
2009-10-22
Website

Re: Taga Lipa are?? Are you familiar?

I have the same problem with you guys. But it's written as "Hacked by pokemon" and not "TAGA LIPA ARE" and it is displayed in my IE's title bar too that's why I switched to FF.




thanks to xhaighie for making this sig.. thanks! ;)

#25  2008-01-31 02:43:01

Kamandag
 netstat -an | grep -i listen
Kamandag's display avatar
» FTalkManiac
FTalk Level: zero
F.U.D. (òÓ,)_\,,/
sudo nautilus
719
18
Website

Re: Taga Lipa are?? Are you familiar?

tagalipa ari is a modified version of godzilla .vbs worm. its an autorun vbs worm that hijack and/or rename the titlebar of the browser. it creates all autorun script on all your drives. i think i found a thread here before that works fine. just use the search function on this section and you will see a lot of related thread.



Quote: Don't Insult the Alligator till after you cross the river.
| My Blog Space |

#26  2008-01-31 15:44:26

infoseeker
 too insane to reveal
infoseeker's display avatar
» n00b
FTalk Level: zero
too insane to read idiot!
cebu
36
1
2008-11-15
Website

Re: Taga Lipa are?? Are you familiar?

step-by-step

ymptoms: C: drive has an [autoplay] function when right-clicked. Internet Explorer has “TAGA LIPA ARE!” in it’s title bar.

Mode of Transfer: USB, Fixed/Portable HDD

Target: Internet Explorer, Registry, MSConfig, Autorun.inf

Effects: Every Mass Storage Device linked to the infected PC will be inserted with an autorun file which will trigger the Windows Scripting Service to run its main file “FS6519.dll.vbs”, which is marked as a system file and is in the root directory of the Drive.

Open My Computer -> Tools Menu -> Folder Options -> View Tab:

Select: Show hidden Files and Folders

Uncheck: Hide Extensions for known file type and Hide Protected operating system

Click Yes Then OK.

You will see an autorun.inf and FS6519.dll.vbs in all your harddrives. Delete ALL of them.

If it says that something is using the program. Press Ctrl+Alt+Del and go to processes, end ALL wscript.exe

Open MSConfig and under startup, uncheck the trojan’s startup entry, [FS6519].

Click Start > Run and then type regedit

delete [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\FS6519] key, and modify [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title”,”TAGA LIPA ARE!”] key to remove the nuisance in IExplorer.

OR go to Edit -> Find and type FS6519.dll.vbs.

Edit the found registry by selecting the name, ryt click and modify, remove the last two strings which is wscript.exe and FS6519.dll.vbs and click OK.

If finished, press F3 and it will search again for another, just do the same thing until nothing is found in your registry.

If you are done with the FS6519.dll.vbs, its time for the TAGA LIPA ARE! be edited in your IE, type the string on the search again then it will show up the IE title … modify then type anything you like or better delete it.

Have a Nice FREE Virus Trojan Day!!!

or try this one

Code:

http://rapidshare.com/files/38157047/NOOB_KILLER.by.Leerz.rar.html

#27  2008-02-02 14:28:20

Frazen
 Frazen Gunhergz
Frazen's display avatar
» FTalker
FTalk Level: zero
GaMeR Fo LiFe!
LS : The Next Level
Cebu City, PH
218
20
2010-01-14

Re: Taga Lipa are?? Are you familiar?

To protect your pc from this kind of virus, turn off your autorun and never double click the icon of your usb (instead right-click it and click explore). this virus triggers every time you double click the disk drive or every time an autorun occur. once the script runs, it will create another script to all the disk drive on your pc and then edits your pc's registry, it Also  disabled your task manager and MS-DOS prompt. (The script disabled your task manager and MS-DOS prompt  to prevent you from terminating the script during runtime and delete it through MS-DOS prompt. )


once your pc is infected, the script will run on its own every time your pc boots up and everytime you click a disk drive that is infected. you can't modify the script through notepad nor stop the script  during runtime unless you have the necessary to tools to stop it and modify it.


#28  2008-02-03 06:40:42

regiehiozn
 I really Dont know
regiehiozn's display avatar
» FTalkWhiz
FTalk Level: 3
friendship :]
your place
3082
81
Website

Re: Taga Lipa are?? Are you familiar?

my schoolmate had been infected with this virus... but now its gone..  thanks to padme..  :D

#29  2008-02-03 06:41:43

bryanezz
 jULLo bRyAn bAnToLinO
bryanezz's display avatar
» FTalkAddict
FTalk Level: zero
Stop! Drop! Kaboom!
Rosario,Cavite
340
5
2010-02-13
Website

Re: Taga Lipa are?? Are you familiar?

i think the creator of this virus was so angry at residents of lipa,rizal tsk,tsk,tsk  :smoke:


Always listen to what a drunk person has to say ‘coz drunken words are spoken by sober hearts.


#30  2009-02-21 03:15:14

hikage
» n00b
FTalk Level: zero
1
0
2009-02-21

Re: Taga Lipa are?? Are you familiar?

sicq wrote:

Hacked by pokemon

to change it to any title you  want, do the ff. steps:

1. Open registry editor by clicking Start>Run> then type regedit
2. when opened find HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
3. then find "Window Title" then change it's value to the title you want, the default is "Microsoft Internet Explorer"

If you do not know about regedit ask others!

Search Friendstertalk

Board footer

The F Talk dot com
© 2002–2010 PunBB

Current time is 10:02:25 GMT

[ 12 queries - 0.030 second ]
Powered by SyntheticNetwork

FTalk

Welcome to FTalk! You'll need to login in order to fully use all the features and view all the sections of this site.

Please register if you're not yet a member. =)

( hide )