suggestions on how to get rid of VX2

[tryintoo]

I've been trying to help a friend clean up her computer. The OS is Win 98SE. Using Lavasoft Ad-Aware and Spy Bot and Norton we have cleaned up everything but one process identified in Ad-Aware under Vendor as VX2. It shows the location as being in the Windows System folder as bcnbngys.exe I have tried to rename and delete this file, but it says Windows is using it.

We downloaded the add-on recommended by Ad-Aware for VX2, but after running the add-on we were not allowed to click on "clean".

We have manually deleted everything that Ad-Aware found in the registry for this, but we can't get rid of this exe program that Ad-Aware finds. It runs in the background and End Task won't stop it. Anyone have any suggestions? We hope to try again next weekend.

Thanks in advance

[ViRaL1]

Are there any suspect files showing up in MSCONFIG?

[bazooka]

I read the other day that spysweeper get's rid of it completely.

You might give spysweeper a try.

[Soopafresh]

Turn Off System Restore


Restart PC in Safe Mode


Run Spyware Killing App of Your Choice


Restart PC in Normal Mode

[thecoalman]

If none of those work there's a specific tool called VXfinder that works great for getting rid of that %#@$$@. I know it was impossible to remove via normal spyware apps when I tried to remove it from a friends machine.

[tryintoo]

Thanks everyone. There are some great suggestions here that we didn't try. Running in safe mode is one of them. I didn't think System Restore existed in Win 98SE. I'll look for it. I am going to check out the other software suggestions too.

Thanks again. I'll let you know the outcome.

[bazooka]

I didn't think System Restore existed in Win 98SE.

It doesn't.

It was introduced in Windows Millennium Edition or Windows M.E . for short.

[Soopafresh]

YIKES ! Sorry, I didn't read the first post carefully enough. Didn't see you were running 98.

[tryintoo]

Soopafresh I tried your method this morning when my friend called me and it worked. Ad-Aware was able to delete this thing while in Safe Mode. She double checked after restarting the computer normally and it was gone.

Thanks so much.

[Soopafresh]

Just repeating what I learned from the folks on this board. Glad to hear it worked.