DISCOVER
×

How to Remove the Jwgkvsq.vmx Virus

Updated July 20, 2017

The Jwgkvsq.vms virus is a variant of the Conficker Worm and is self replicating. It spreads through infected machines in an office or home network, e-mail attachments memory sticks and other USB devices (primarily storage devices). The Conficker worm resides on both Windows and non-Windows devices and creates an additional option in the AutoPlay Dialog Box on USB storage devices. Most antivirus and malware software providers have developed tools to remove the worm.

Download and run the Microsoft Malicious Software/Removal Tool. The tool is available at the Microsoft Support, Virus and Support Center website (see Resources). Once the tool finds the Jwgkvsq.vmx or Conficker virus, follow the on screen instructions to remove the virus.

Remove your computer from your network if the Microsoft Malicious Software/Removal Tool does not remedy the situation. Disconnect the Ethernet/Network cable. Run any Conficker removal tool available from a reputable antivirus software provider.

After scanning and removing the virus you may be directed to the Microsoft website to download and install a Critical Security Patch/Update. After installing the patch/update, reboot your computer and check to see if the virus has been removed.

To ensure that the virus has been thoroughly removed, disable and re-enable System Restore. Turn off System Restore by right-clicking "My Computer", selecting "Properties", clicking on the "System Restore" tab, and checking "Turn off System Restore on all drives". Click "Apply" and "OK". Restart your computer. Repeat the process, but this time removing the check in the "Turn off System Restore on all drives" option box; thus re-enabling System Restore.

Remove all external USB storage devices from your computer. Start your computer in Safe Mode. For most computers this is done by restarting your computer and pressing F8 repeatedly once the Windows Screen appears. Select "Safe Mode" from the menu.

Plug in your USB devices. Autorun will not operate in safe mode. Go to any folder, and click "Tools", "Folder Options", "View" Tab. Enable the "Show Hidden Files and Folders" option.

Delete autorun.inf file. It is usually located in the root (main page) of the USB drive or device.

Delete the hidden system folder RECYCLER. If you cannot delete this folder, disable its function (only do this for external or portable hard drives) by right-clicking on the Recycle Bin icon, selecting "Properties", "Configure" drives independently. Once this has been completed, tab back to the external drive and check "Do not move files to the Recycle Bin, hit "Apply" and then "OK".

Cite this Article A tool to create a citation to reference this article Cite this Article

About the Author

Writing since 1994, Norvill Clark has more than 25 years of diverse high-tech experience including corporate law, sales, marketing and graphic arts. He writes for eHow and Answerbag on topics related to computer technology and law. Clark holds a Juris Doctor from American University.