How to Remove JAY.EXE and MVEO.EXE Virus

Jay.exe virus infects internal and removable drives. Unfortunately some of the antivirus available isn’t good enough to remove this virus but manually removing this insect can do the trick. Here’s how you should do it.

Follow these steps to locate all the mveo.exe and jay.exe files.

1. Open windows explorer window.
2. On the Menu bar click Tools then click Folder Options.
3. Select View tab. On the hidden files and folders menu click on show hidden files and folders.
4. Uncheck hide extensions for known file types.
5. Uncheck hide protected operating system files (recommended).
6. Click Apply then OK.

Next we will have to remove the jay.exe and mveo.exe files.

1. Press ctrl+alt+del to open Task Manager.
2. In the PROCESSES tab look for the mveo.exe and click End Process.

If you could not bring up the task bar and you get a “Task Manager has been disabled by your Administrator” message, you probably have another virus in your system that prevents this. (See How to fix your Task Manager)

To delete all the jay.exe and mveo files, search for it using the search for files and folder option in the start menu.

1. Type jay.exe in the search bar.
2. Click more advanced option.
3. Put a check on search hidden files and folders.
4. Then click on start search.
5. Delete all jay.exe entries.
6. Repeat steps 1-5 to search for mveo.exe.
7. Also delete autorun.inf file.

To delete registry entries:

1. Click on start -> run, then in the run text box type regedit.
2. Press ctrl+f and type in the textbox jay.exe
3. Delete all entries having jay.exe entries
4. Press F3 to search the next entry.

Note: if an entry is in c:\windows… edit the value and go to the end of the string anddelete only the jay.exe text on the end of the string

To edit the IE windows back to its original name:

1. Open regedit.
2. Press ctrl+f, then type in the search bar window title.
3. If the value that appears has the jaymyka.wen9.com value, change it to Internet Explorer.

Note: this would be the title bar of your Internet Explorer.
After all of these steps are done: try to look again for the jay.exe and mveo.exe files using the search for files and folders application of windows. After deleting all those files restart your computer.

IMPORTANT: The article that I wrote is based on my personal experience dealing with this virus. The procedure that I’ve given is worked for me and other computers that I repaired that have been infected by this virus. I could not give a 100% guarantee if the process that I given will work for you especially if you have other viruses in your PCs. But still, Hope you can make it.
Related Topic (How to Open Show Hidden Files and Folders)

How to remove TAGA LIPA ARE! Virus

Before we start removing this virus. First thing is to get familiar with the virus itself. The “virus” file is FS6519.dll.vbs. It’s a VB Script that does nothing except make a copy of itself in all your drives including removable drives such as USB Flash drives and change the title of Internet Explorer to “TAGA LIPA ARE!”.

Here are the directions on how to remove the TAGA LIPA ARE! virus.

First, configure your folders to show system, OS and hidden files and file extensions.

1. Double-Click My Computer; on the menu bar click Tools -> Folder Options. Then Click the View Tab. Then Search and Select Show hidden files and folders and lastly, uncheck Hide protected operating system files (recommended). It will popup a message and just click “yes” and “Apply”. (see How to Open Show Hidden Files and Folders)
2. WARNING! Please pay attention to this, DO NOT DELETE OTHER FILES aside from the ones listed below.
3. Open Drive C:/ look for the name FS6519.dll.vbs and Remove/Delete FS6519.dll.vbs (I would suggest using the Shift + Del here.).
4. After you delete the FS6519.dll.vbs virus on Drive C: go to Windows Folder and search the entire directory again and delete the mentioned virus that appears on the directory. Check also System32 folder and search the whole directory if you see it then remove it.
5. If you have other partitions like Drive D: look the name of that virus and delete in from your drive.

After deleting on the windows folder lets go to registry.

1. Click Start à click RUN then type regedit.
2. Remove the registry entry:HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/Current Version/Run/FS6519.dll
3. Then Remove all copies of the file FS6519.dll.vbs and autorun.ini from all your drives. Again, I suggest using Shift + Del here.
4. To restore the name of IE to Internet Explorer, change the value of HKEY_CURRENT_USER/Software/Microsoft/InternetExplorer/Main/Window Title from “TAGA LIPA ARE!” to “Internet Explorer” by double clicking the registry entry. And that’s it; the “virus” is gone.

IMPORTANT: The article that I wrote is based on my personal experience dealing with this virus. The procedure that I’ve given is worked for me and other computers that I repaired that have been infected by this virus. I could not give a 100% guarantee if the process that I given will work for you especially if you have other viruses in your PCs. But still, Hope you can make it.