PC Trojan/Worm/Virus: "Ttms Naa Na Diri"

[radiazone]

does anyone had been infected with this trojan "TTMS NAA NA DIRI, DON’T WORRY I’M NOT A CORRUPT LIKE YOU!" my lappy got infected thru flash disk....

what's your solution?


thanks a lot for all who have inputs especially those who have been infected and succesfully removed it from their pc...

[jvdejesus05]

if you cant remove it using an updated virus scanner then i think you should try reformatting your laptop...

[radiazone]

i just installed kapersky now, hindi rin niya madelete ang worm.. i think ^^ reformat in zerofill would be my last option, i have to cleansed first my flash disk kasi dito galing ang worm, from other internet cafe nung nagpaprint ako ng documents....

[Memphis Raines]

I thought that this was a Visayan thread

[radiazone]

^^

oo nga.. pero pag computer savvy ka seguro alam mo na meanin nun...

[russpogi]

Have you tried AVG Free? I don't think I was ever infected by this worm/trojan but AVG Free works the way I want it to be.. to protect my system.

[Elroi]

try to remove it using the registry editor.. here's the link to the procedure..

Removal Instructions


meron pa yata isang version nyan. nakasulat naman "TAGA LIPA ARE DAMNED"..

HTH

[karlbo]

try this.. maybe this can help you..

SUPERANTISPYWARE

- http://tinyurl.com/ysredh

[Stoner]

First it was 'TAGA LIPA ARE!'... then something about Baguio strawberries... I dunno any spinoffs na from there on.

If you see an AUTOPLAY.inf file in the root directory of the flash drive, most probably it's infected with that type of malware...

Of course nothing beats an updated virus scanner + anti-spyware + personal firewall, but you should turn off any autoplay functions for removable storage devices just in case to avoid any future infections (anyway you don't really need autoplay). One way in doing so is to download TweakUI from Microsoft from this page (I'm assuming you're using Windows XP). The tool allows you to configure various properties of your Windows OS including turning off autoplay....

...or you can just press and hold the SHIFT key when plugging in a removable storage device so that Windows doesn't do autoplay.

Finally, avoid double-clicking on the device drive letter to access its contents if you're not sure that it's safe. Instead, right-click on it and select Open as infected devices will attach Autoplay with the double-click action.

Hope this helps.

[badkuk]

hmm...looks homegrown to me. if the author used some sort of kit, virus scanners may be able to remove it. if it's new from the ground up, baka hindi.

di ba pwede kang magsubmit ng new virus to the virus software companies, so they can study it, formulate removal, and include it in their db?

[NazQ]

- back up.
- system restore in safe mode.
- run updated antivirus.. (use most recent date before symptom occured)
- run updated adware removal program.
HTH

[A121]

sa akin naman LIBRARY BOYS ARE

use IBPROC.exe to stop all unwanted processes (wscript.exe)
delete all Tagalipaare.dll.vbs (or something like that) in your windows\system folder
use HijackThis.exe to delete all unwanted registry entries.

you can remove all the unseen stuff using nero

[BoEinG_747]

sa akin naman LIBRARY BOYS ARE

use IBPROC.exe to stop all unwanted processes (wscript.exe)
delete all Tagalipaare.dll.vbs (or something like that) in your windowssystem folder
use HijackThis.exe to delete all unwanted registry entries.

you can remove all the unseen stuff using nero

paano gamitin sa NERO ito ? at any version ba ng NERO

lagi kasi may nag aappear sa akin na AUTOPLAY..kakaasar na nga

[A121]

paano gamitin sa NERO ito ? at any version ba ng NERO

lagi kasi may nag aappear sa akin na AUTOPLAY..kakaasar na nga

parang magbuburn ka lang ng files...

click mo add files. tas makikita mo lahat ng files in that directory. highlight it, and press delete.

[radiazone]

i already did remove it, after days of overtime killing it... it was an autorun.inf ang nagpapagana sa worm to run it over and over again, pag dnelet mo ang ttms vbs babalik at babalik din so what i did is to show all hidden files ayun nakita ko rin and delete it, kaya lang di na gumagana ang autoplay ng PC to access HD partition, ang gingawa ko use a tuneuputilites2007 to repair the registry... presto... back to normal na... salamat sa mga nag input at di ko nakita mga post niyo kasi i'm out of city...

kaya ingat sa mga removable drives, don't run autoplay if possible....

[eogr_ece]

Sir/s help me naman po pano po mawala tong message na ng aapear sa laptop
Error loading windows/system 32/pkqgodjq.dll

tsaka

windows cannot find system\ Isass.exe

OT: pag nag alt+control+del naka gray out na task manager.

[bomboklat]

trojan ayan yung ginagamit ng mga hacker para malaman password mo,maganda reformat mo na pc mo

[bomboklat]

kundi ka marunong mag format try mo system restore

[washburn]

sir question po sa mga user ng AVG free, pag napunta ba sa virus vault yung trojan horse safe na pc mo o kailangan mo pang I-reformat
pati anu kaya problema pag double click ko kasi yung drive c: lumalabas
"Can not find script file :C:\imgkulot.vbs"" ?
thanks po

[A121]

Sir/s help me naman po pano po mawala tong message na ng aapear sa laptop
Error loading windows/system 32/pkqgodjq.dll

tsaka

windows cannot find system Isass.exe

OT: pag nag alt+control+del naka gray out na task manager.

safe mode ka, disable system restore tas run ka ng matinong antivirus.