Jump to content
Sign in to follow this  
yurckk

[Solved] Remove "Recycler\.....\jwgkvsq.vmx"

Recommended Posts

Salam,

Ade sesape pernah experienced ngn virus ni tak? by the way, sama ke ngn thread xleh nk update AV bukak AV nyer website tu?

jwgkvsq.vmx ni yang aku perasan ade berkaitan ngn DLL/Svchost so nk kill mmg xleh.
Mcm2 dah aku carik tp kebanyakan Website disabled. Maybe caused by this virus.

"Oops! This link appears broken."

Ni aku pny SvcHost-Netsvcs list:

Code:
6to4
AppMgmt
AudioSrv
Browser
CryptSvc
DMServer
DHCP
ERSvc
EventSystem
FastUserSwitchingCompatibility
HidServ
Ias
Iprip
Irmon
LanmanServer
LanmanWorkstation
Messenger
Netman
Nla
Ntmssvc
NWCWorkstation
Nwsapagent
Rasauto
Rasman
Remoteaccess
Schedule
Seclogon
SENS
Sharedaccess
SRService
Tapisrv
Themes
TrkWks
W32Time
WZCSVC
Wmi
WmdmPmSp
winmgmt
wscsvc
xmlprov
BITS
wuauserv
ShellHWDetection
helpsvc
WmdmPmSN
fyrton


Thanks in advance!

Share this post


Link to post
Share on other sites
Thx for you effort. tp ni xkn jadi aku rs, even DLL file xsama ngn org lain yg aku tgk having mslh sm ngn aku. ape yg aku phm virus ni inject into system. DLL injection. mmg nyampah gak r ngn virus ni.

Byk website makin kena block....lg fedap jadinyer...naseb pc ofis je ni kalo pc kt rumah...format la jawabnya..hahaha...

geek remover? kk aku try that...thanks...

Share this post


Link to post
Share on other sites
Ok solved, for now sume site yg xleh msuk dah bleh. tp xtau kalo ade infection lain lg. skrg baru leh nk update AV and re-scan PC.

Ok so here aku share ape yang leh removekn this d**m virus:

jwgkvsq.vmx removal




Mirror 1: http://www.filefactory.com/file/agcga43/n/KidoKiller_rar
Mirror 2: http://www.filedropper.com/kidokiller
Mirror 3: http://www.badongo.com/file/14547386
Mirror 4: http://www.webfilehost.com/?mode=viewupload&id=3185125
Mirror 5: http://www.zshare.net/download/589070553f58d8a9
Mirror 6: http://www.turboupload.com/u4hj3p90bjuo/KidoKiller.rar.html
Mirror 7: http://www.youshare.com/bradwilk/a42743/DisplaySimple

Share this post


Link to post
Share on other sites
ni flash virus... duk dalam registry je..
nak lagi berkesan, delete cara manual..
guna geek, kill all process... kat option folder..
show all hidden, include system file.. pastu run search..
cari fail tu, delete.. tgk2 kat c.. ada fail nama dia autorun.*
check isi kandungan dgn right klik --> edit.. kalau ada nama jwgkvsq
delete autorun tu.. dah selesai semua, run AV yg dah update..
Full scan.. mana2 virus yg terjumpa, delete je.. jgn quarantin..
delete tanpa was-was.. haha ::icon_lol::

Share this post


Link to post
Share on other sites
Haha dok dlm registry je pun tp bnde ni ade kaitan ngn network, so kalo infected baik unplug la network. and ade review aku bc "key logging" pun ade. plus byk lg yg aku rase menyusahkan in future. tp tu r aku pake KidoKiller tu. run pakai cmd je. xslh kalo tulis kt c2 kaspersky nyer. so untuk memudahkan org nanti, aku dah share dlm file hosting atas tu. ade 7 mirrors aku buat.

btw cara ang mngkin leh pake gak kot. so ade options pd sape yg mencari cara nk remove virus ni nanti. thanks papehal gak ::icon_biggrin::

Share this post


Link to post
Share on other sites
Ehhh...file ni die inject file lain x? Sbb aku try kaspersky, banyak gile virus detect...termasuk la my documents...pelik gak aku...tp aku try bitdefender xplak detect..

Share this post


Link to post
Share on other sites
Dh try GVR 4.2 Beta baru nya? [url]sini http://forum.geekzlife.net/download/file.php?id=24&sid=a6aaffcfaaedbd13217146f57bba14e6[/url]

Kamu upload dulu pada shahrir minta dia wat new database http://www.geekzlife.net/v1/upload-sample-virus/

Perkara biasa la tu,ada yg AV dpt detect ada yg x,semua AV xsempurna & 100% detection,based on dia dpt detect varians tersebut.Kalo kita x upload sample xde la signature dia nk berubah.
Takutnya jadi dulpicate file.,huhuh.,seram,.delete restart ada blk..,So skrg cmne?Apa yg terjadi ?Buat dlm safe mode?

Kaspersky detect?sebagai?apa kata kamu bg je results kaspersky tu.Minta otai2 sini tlg.Jgn kamu diam je,tetiba muncul balik.Dia dh delete?quarantine?postpone?

Share this post


Link to post
Share on other sites
File virus tu kt opis, next week xmasuk opis smggu outstation. so maybe aku reply lmbt sket nant, btw thx a lot!~

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
Sign in to follow this  

×
×
  • Create New...