Computing.Net > Forums > Security and Virus > VX2 removal

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

VX2 removal

Reply to Message Icon

Original Message
Name: MattSW11
Date: March 5, 2005 at 10:48:47 Pacific
Subject: VX2 removal
OS: Windows XP
CPU/Ram: P4 3.0GHZ
Comment:

Following an internet search for help I came across this forum. I have been working to clear VX2 for about a week with no joy at all. I had kindof come to the conclusion that the solution might be to 'disable' the rogue .dll files using the Properties and Security permissions tab as suggested, but your post made me have another go. Ive just run a sweep with Ad-Aware SE, and Microsoft AntiSpyware Beta plus. No sign of it on my machine to date - although Im sure it will sneak back! The proceedure I used was:

1.Boot in 'safe mode'.

2.Run Adware-SE to locate the latest mutations of VX2 (Ad-Aware-SE is good at locating the B****stards but not deleting them. The VX2 plug-in seems to have no effect at all.)Do NOT delete. If you do they will just mutate.

3. Open the Windows\System32 files (where VX2 hides..) and locate the offending .dll s.

4. Right click the .dll files and select the security tab. Select 'System' as you suggest and deny all access. This prevents them replicating or hiding in running memory.

5. Open 'Killbox' (you need to download this)and kill the offending files. Also run the Killbox Windows Temp file tool and delete all Windows Temp files(Just in case the Bl**dy VX2 is hiding elsewhere!)

6. Reboot - and its gone! for now....

One final suggestion. The VX2 files wouldnt let 'Killbox' delete them even when neutered, so I selected the 'delete files on system re-boot' option. This finaly seemed to work. Hope this helps someone..this thing was driving me CRAZY!!!!!!!!

Matt



Report Offensive Message For Removal


Response Number 1
Name: Jimi_l
Date: March 5, 2005 at 16:06:46 Pacific
Reply: (edit)

Slave the drive to another machine and manually delete the files from there.

Short of a re-format these is no easier way.

I just fought this thing off for a client and as you know it SUCKS. The worst of the worst.

Jimi-l


Report Offensive Follow Up For Removal

Response Number 2
Name: cyberbuzz
Date: March 7, 2005 at 14:20:07 Pacific
Reply: (edit)

Alternatively, try www.spywarewarrior.com.
The people there can usually clear up an infection like that!


Report Offensive Follow Up For Removal

Response Number 3
Name: ugnius
Date: March 31, 2005 at 04:49:08 Pacific
Reply: (edit)

here one of the users explained step by step removal of vx2.


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 4 Days.
Discuss in The Lounge
Poll History




Data Recovery Software