// -->

Tag Archive: virus


Remove the jwgkvsq.vmx worm-virus

Computers at the office were infected by this simple, yet fast-spreading worm virus. Autorun.inf keeps appearing on USB drives, and a file titled jwgkvsq.vmx is hiding in a RECYCLER folder. A couple of  computers I managed to fix and removed the virus, two other were reformatted. Even my latest and updated anti-virus didn’t detect this, also my autorun scanner was by passed by it. My computer terminal was not infected of course. I have tight security on it.

It took me two whole days, just to check up on each computer in our office network. And a few hours just to complete the guide I made to remove it.

If you think you are infected, check out my post at TechieBubble.com on How to remove the jwgkvsq.vmx worm virus.

Also it seems that I also got this virus a couple of weeks back on my friend’s laptop. It spread through my external hard drive, of course when I plugged it in my computer at home it didn’t spread but I did have trouble deleting the file. Thankfully MoSo Force Delete removed it. It was my first encounter, but I dismissed in only as a normal autorun.inf virus.

Popularity: 3% [?]

I’m going to make this as short and as clear on the instructions as possible. Take note however that I’m not an expert on viruses so I advice you to consult an expert first or, if you are willing, just go a head and follow my instructions. I was once a programmer, but I didn’t pursue that field, and I moved on to web development. Anyway I have encountered many viruses in my daily use of computers, and as much as I know programing and how code works, I can usually remove it without using any anti-virus software. However, be warned that the following procedure will require you to edit your Registry and thus no mistakes must be made there. Or else you may end up with a messed OS.

Introduction

SSCVIHOST.exe according to my research has many names, the popular are W32/Sohana-AO (Sophos) and W32.Imaut.AY (Symantec/Norton). Basically this is a type of worm virus that spreads via USB thumb drives and/or Yahoo! Messenger. A worm virus, technically, doesn’t destroy your files, it just add tons of of useless files in order to fill up your hard drive or slowdown your system resources. We don’t like that do we?

Anti-virus softwares

Most major anti-virus products with the latest definition files installed, detects this virus so you don’t have to worry about it spreading through your hard drive. Sophos, Symantec Norton, TrendMicro PcCillin, already detects this. I’m not sure about McAffe, AVG, or ESET NOD 32. But I will tell you this, BitDefender, even with the latest update installed doesn’t detect this. So you have that anti-virus program, chances are, SSCVIHOST.exe will eventually reach your computer.

Symptoms

  1. CLTR+ALT+DEL is not working
  2. Folder Options is missing from your TOOLS menu
  3. Registry Editor (RegEdit) is not working
  4. Your system is slowing down gradually
  5. There seems to be a lot of hard drive activity even if you are doing nothing
  6. You have a New Folder.exe in every folder and in each sub folder

Preparation

This is the actual procedure I did when the worm infiltrated my PC. Before you start on the procedure, you have to download this file from Symantec.

UnHookExec.inf (click to go to the website and the download link).

The file will enable RegEdit and other commands disabled by the virus. Save this file in your desktop. Now let’s start.
View Full Article »

Popularity: 59% [?]

Powered by WordPress and Motion by 85ideas.
[ Back to top ]