Why This ?

"10% |uC|< , 20% 5|<1||,

15% c0nC3N7R473 4Nd P0\/\/3R 0ph \/\/1|| ,

5% p|345Ur3 , 50% p41N ,

4nD 4 100% r3450N 70 r3m3mB3R 7H3 N4M3"

Upload Your Files Here

Total Visits

Tuesday, February 17, 2009

Problem of "jwgkvsq.vmx" Has Been Resolved

(PROBLEM)

Now a days this is a very popular problem that when every time you delete "jwgkvsq.vmx" from your removable drive from the following location -------
".\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx" then every time it recreates. But when you scan your system with antivirus then no-one can not detect this.

(SYMPTOMS)

You can not see your hidden files in your computer. You can not open some websites like microsoft.com, spywareterminator.com etc.

(SOLUTION)

Install AVAST antivirus with latest updates. Schedule a boot time full system scan and reboot the PC. After some time it detect a worm(a DLL file) in System32 folder. In my case the file name was "cfgnm.dll". But the file name may not be same because it create a DLL file with random name. Actually it was locked by a system file named "svchost.exe". So the antivirus can not detect it while running Windows. So when the file is detected by boot scan the offcourse delete it.

At last login to your windows and open Registry Editor (regedit). In registry editor search for "jwgkvsq.vmx".If any result found then delete the every registry entry. In my computer all infected registry keys are under the followng key ---
"HKEY_USERS\S-1-5-21-1844237615-796845957-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\"

Now reboot your PC and you have a clean system.

2 comments:

Arun Prabhakar said...

Hii, There are some manual steps to remove this virus. For those who like to hunt it for real. Here is the link
http://digitalpbk.blogspot.com/2009/04/jwgkvsqvmx-conficker-virus-manual.html

Kanishka Dilshan said...

We have developed a removal tool for the virus (Recycler\...jwgkvsq.vmx).
Please use following link to download the tool.
http://it.web44.net/VirusDetails/jwgkvsq.vmx.Recover.report.php

Please give your comments on our web site.
Thank you.

Imago Labs®(Sri Lanka)

Earn Money By Sharing Your Files

Earn Money While Surfing

Secure Money Transfer Through Internet