I’ve been bugged by a lot of people asking me to help them remove the TAGA LIPA ARE! ‘virus’ in IE. So, I’m posting the directions here.
First thing is to get familiar with the ‘virus’. The ‘virus’ file is FS6519.dll.vbs. It’s a VB Script that does nothing except make a copy of itself in all your drives and change the title of Internet Explorer to “TAGA LIPA ARE!”.
First, configure your folders to show system, OS and hidden files and file extensions. Remove/Delete
C:\Windows\FS6519.dll.vbs
I would suggest using the Shift + Del here.
Second, open
regedit
in the run command. Remove the registry entry
HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/Current Version/Run/FS6519.dll
Then Remove all copies of the file
FS6519.dll.vbs
and
autorun.ini
from all your drives. Again, I suggest using Shift + Del here.
To restore the name of IE to Internet Explorer, change the value of
HKEY_CURRENT_USER/Software/Microsoft/Internet Explorer/Main/Window Title
from “TAGA LIPA ARE!” to “Internet Explorer” by double clicking the registry entry. And that’s it, the ‘virus’ is gone.
It’s really harmless and if you ask me, it looks something that an attention-seeking-twelve-year-old-with-a-compiler would do. And you, on the other hand, should know better next time.
1 comment:
This is such a great info! Now I can remove the virus in my PC without hiring a technician... Thanx a lot!
Post a Comment