Home Spyware Database "VX2 Removal Guide"

VX2 Removal Guide

VX2 Description

VX2 Automatic Detection (Recommended)

Is your PC infected with VX2? To safely & quickly detect VX2, we highly recommend you...

Download SpyHunter's* Malware Scanner.

VX2 Manual Removal Instructions

Backup Reminder: Always be sure to back up your PC before making any changes.

Step 1 : Use Windows Task Manager to Remove VX2 Processes

Remove the "VX2" processes files:
ffisearch.exe nvnav32g.exe preinmpp.exe svchost32.exe systoan.exe msdos.exe msfnt32i.exe infwin.exe installer.exe hjfp.exe f4230203.exe hmhaxp.exe boot.exe f0e66c68.exe 110.exe 3.exe adlinstallwin32.exe hjfp.exebios32.exe f4230203.exe hmhaxp.exe boot.exe f0e66c68.exe 110.exe 3.exe adlinstallwin32.exe bios32.exe
Read more on How to kill VX2 Processes

Step 2 : Use Registry Editor to Remove VX2 Registry Values

Locate and delete "VX2" registry entries:
LocalNRD 00320615-B6C2-40A6-8F99-F1C52D674FAD SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\SahRenamer 1C896A54-EC35-53B3-D301-17557CA87261 HKEY_LOCAL_MACHINE\system\currentcontrolset\control\print\monitors\zepmon HKEY_LOCAL_MACHINE\software\transponder HKEY_LOCAL_MACHINE\software\respondmiter HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemmonitorforwindows98/nt/xp/2000/2003_is1 HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\adbehavior HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runnarrator HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runkavsvc HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browserhelper 002eb272-2590-4693-b166-fbd5d9b6fea6 00000580-c637-11d5-831c-00105ad6acf0 00000273-8230-4dd4-be4f-6889d1e74167 0000026a-8230-4dd4-be4f-6889d1e74167 20000273-8230-4dd4-be4f-6889d1e74167 11111111-1111-1111-1111-111111111111 HKEY_LOCAL_MACHINE\software\microsoft\activesetup\installedcomponents\f1e45b94-76ba-4e62-9fe8-a72a04ec35a9 ffd2825e-0785-40c5-9a41-518f53a8261f 00000000-5eb9-11d5-9d45-009027c14662 HKEY_CURRENT_USER\software\multimpp HKEY_CURRENT_USER\software\microsoft\currentversion\runsysmonnt HKEY_LOCAL_MACHINE\system\currentcontrolset\control\print\monitors\zepmonHKEY_CLASSES_ROOT\vx2.vx2obj HKEY_LOCAL_MACHINE\software\transponder HKEY_LOCAL_MACHINE\software\respondmiter HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\system monitor for windows 98/nt/xp/2000/2003_is1 HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\adbehavior HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run narrator HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run kavsvc objects\{ffd2825e-0785-40c5-9a41-518f53a8261f} HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{002eb272-2590-4693-b166-fbd5d9b6fea6} HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{00000580-c637-11d5-831c-00105ad6acf0} HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{00000273-8230-4dd4-be4f-6889d1e74167} HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{0000026a-8230-4dd4-be4f-6889d1e74167} HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{00000000-5eb9-11d5-9d45-009027c14662} HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{20000273-8230-4dd4-be4f-6889d1e74167} HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{11111111-1111-1111-1111-111111111111} HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\f1e45b94-76ba-4e62-9fe8-a72a04ec35a9 HKEY_LOCAL_MACHINE\software\classes\clsid\{ffd2825e-0785-40c5-9a41-518f53a8261f} HKEY_LOCAL_MACHINE\software\classes\clsid\{00000000-5eb9-11d5-9d45-009027c14662} HKEY_CURRENT_USER\software\multimpp HKEY_CURRENT_USER\software\microsoft\currentversion\run sysmonnt HKEY_CLASSES_ROOT\vx2.vx2obj
Read more on How to Remove VX2 Registry Entries

Step 3 : Use Windows Command Prompt to Unregister VX2 DLL Files

Search and unregister "VX2" DLL files:
6fo4svc.dll localNrd.dll msview.dll sitehlpr.dll tps108.dll 3lviewer.dll mcon.dll nhtml.dll winup2date.dll cleanhistories.dll psapi.dll vx2.dll
Read more on How to Remove VX2 DLL Files

Step 4 : Detect and Delete Other VX2 Files

Remove the "VX2" processes files:
6fo4svc.dll localNrd.dll ffisearch.exe qzzhhqud preinmpp.exe svchost32.exe systoan.exe msdos.exe msfnt32i.exe infwin.exe installer.exe msview.dll sitehlpr.dll tps108.dll 3lviewer.dll mcon.dll nhtml.dll winup2date.dll cleanhistories.dll psapi.dll vx2.dll hjfp.exe f4230203.exe hmhaxp.exe boot.exe f0e66c68.exe 110.exe 3.exe adlinstallwin32.exe bios32.exe nvnav32g.exe preinmpp.exe svchost32.exe systoan.exe msdos.exe msfnt32i.exe infwin.exe installer.exe
Read more on How to Delete Harmful Files

Step 5 : View the VX2 Components with its MD5s

Remove the "VX2" components:

File Name	File Size	MD5
fed.exe	94208	bf8489ef5e9bdfc21ffd2b7de5bb546c
ZServ.dll	172032	ff98c003b79165dd370c2acba2c9fb92
ffisearch.exe	34146	af31054d6a0a336f979ebcbda2f151e8
satmat.exe	26624	9f1bbd427b1ec064981cee62353cb32e
qqzjohca.exe RANDOM	241664	70e2d9852e2ced01c8b626e9c70777d3

Back to Top

Site Disclaimer

Publication Date: Tue Mar 29 2005 7:47:00 EST

User Comments

There are no comments posted for this page.

Leave a Reply

Name (required)

Mail (will not be published) (required)

Anti-spam word: (Required)*
To prove you're a person (not a spam script), type the security word shown in the picture.

Back to Top