Download a system maintenance engineer (SRE) 2.4.12.806:/sreng/download.html.
Usage:/teyqiu/blog/item/f706213fc52346ec54e72351.html.
Install, restart to safe mode, "Start project/service/driver", check "Hide certified Microsoft project", find the project with bwbgao97.sys in the remaining list, and change it to disabled. Then restart to enter the safe mode, and use Kabbah to kill the virus or delete it manually. Finally, clean up the registry key related to the killed virus file.
Supplement:
According to what you said, there should be other protection processes in bwbgao97.sys Use SRE to disable all those without company signature in "startup project/service/driver" and "startup project/service /win32 service application", write down the file names of these disabled projects, restart to normal mode, and try again with Kabbah. Or just delete it with IceSword, but it's risky. In case of emergency, it is recommended to copy to another location first. Open the registry with regedit, and the items related to these files will also be cleared.