How to Remove “FS6519.dll.vbs” or If you Have “TAGA LIPA ARE!” in your IE

March 18, 2007 at 2:11 am (Troubleshooting)

Symptoms: C: drive has an [autoplay] function when right-clicked. Internet Explorer has “TAGA LIPA ARE!” in it’s title bar.

Mode of Transfer: USB, Fixed/Portable HDD

Target: Internet Explorer, Registry, MSConfig, Autorun.inf

Effects: Every Mass Storage Device linked to the infected PC will be inserted with an autorun file which will trigger the Windows Scripting Service to run its main file “FS6519.dll.vbs”, which is marked as a system file and is in the root directory of the Drive.

to view the complete tutorial click here.

Permalink 144 Comments