FS6519.dll.vbs not found! at WengOnline

FS6519.dll.vbs not found!

March 28th, 2007
School, Techie, Technology, Tidbits.

A quick google search gave me the following:

Added by the worm VBS.Solow.B Note: Located in the Windows directory. VBS/Solow-B also creates the file \autorun.inf which contains the following lines: [AutoRun] shellexecute=wscript.exe FS6519.dll.vbs. The worm also creates the following registry entry, which modifies the title bar of Internet Explorer: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main”Window Title” = “TAGA LIPA ARE!”

This worm spreads mostly because of flash disks. Almost all of my classmates were infected!

To remove the worm, follow these instructions carefully.
1. Search for FS6519.dll.vbs and autorun.inf on your hard disk drive and delete all instances of these files.
2. If you get a warning that something is using the program. Press Ctrl+Alt+Del (to bring up the Task Manager) and go to Processes, end all instances of wscript.exe. Close the Task Manager afterwards.
3. Run regedit.exe
4. Go to Edit and Find FS6519.dll.vbs.
5. Edit any matching registry entry by selecting it, right-click to modify, remove the last two strings which is wscript.exe and FS6519.dll.vbs, and click on OK.
6. To continue searching for other matching entries, press F3. Repeat step 6 for all matches found.

If you use IE to surf, you have to find one other string ‘taga lipa are’ in your registry and also delete that string. Thank you Firefox for not being prone to this worm!

7 Responses to “FS6519.dll.vbs not found!”

Feed for this Entry Trackback Address

1 Dennis May 9th, 2007 at 10:06 pm

Hi

I have done step 1 through step 6 but my PC is still infected by FS6519.dll.vbs virus. I cannot open my C: drive my double clicking. I have to right click and click open on the context menu and there is still autorun on the context menu. How can I restore it back to normal?

Thanks,
Dennis
2 kd Jul 3rd, 2007 at 10:51 am

I have done step 1 through step 6 but my PC is still infected by FS6519.dll.vbs virus. I cannot open my C: drive my double clicking. I have to right click and click open on the context menu and there is still autorun on the context menu. How can I restore it back to normal? (me too!)
3 Weng Jul 4th, 2007 at 9:00 am

For those who still have problems with FS6519.dll.vbs, try my other post http://www.wengonline.com/2007/05/10/follow-up-on-fs6519dllvbs/
4 Bob Aug 15th, 2007 at 7:01 pm

Is it normal to have a autorun.inf and no FS6519.dll.vbs ???

When I searched my drives I counldnt find any FS519 but found about 2-3 autorun.inf. Should I delete autorun.inf? Is it safe?

Um…..I was wondering if you could help me with this problem if you have the time………

I scanned my USB flash drive and my snti virus detected a threat. It was the FS6519.dll.vbs. Since it was a threat my instincts tell me that I need to delete it……..so I did. Now my flash drive wont work. Everytime I try to opne it it says cannot find script FS6519.dlll.vbs. Any tips on how to fix this???

Thanks much in advance!!!
5 Weng Aug 16th, 2007 at 8:44 am

Hi Bob. see my first comment.

Autofun.inf might be on some CDs/DVDs that have installers on them. Those can’t be deleted. Those on the flash disk, in your case, should be deleted.
6 troy Aug 28th, 2007 at 5:29 pm

i have reformated my laptop since it has many viruses then my drive d: wont open and it says

can not find the script “D:\Fs6519.dll.vbs”

what should i do, then i search this script then the web tells its a virus. why would my laptop requires that script if it is a virus?

help me thanxz