Run this from recovery console:
batch fix.bat
cd system32
attrib -s elitexuc32.exe
attrib -r elitexuc32.exe
del elitexuc32.exe
attrib -s rrmram.exe
attrib -r rrmram.exe
del rrmram.exe
attrib -s ozbccr32.dll
attrib -r ozbccr32.dll
del ozbccr32.dll
attrib -s frxocm.dll
attrib -r frxocm.dll
del frxocm.dll
08/19/2001 06:30a 11,593 eliteszb32.exe
08/19/2001 06:30a 11,593 elitewci32.exe
vcmnet11.exe - under windows directory
rauioj.exe@c:\windows\system32
nail.exe@c:\windows
wmgfeq.exe@c:\windows\system32
evmfch.exe@c:\windows\system32
rlsvszw.exe@c:\windows\system32
enkyxb.exe@c:\windows\system32
reojmh.exe@c:\windows\system32
vwzailkubk.exe@c:\windows
tdtb.exe@c:\windows
svcproc.exe@c:\windows
elitealp32.exe@c:\windows\system32
adlinstallwin32.exe@c:\windows\system32
adlinstallwin32.exe@c:
TASKMAN.exe@C:\WINDOWS
ilaijn.exe@C:\WINDOWS
ieuninst.exe@C:\WINDOWS
Q330994.exe@C:\WINDOWS
rrmram.exe and vcmnet11.exe come back after rebooting .. suspect trojan virus
Nail.exe removal instructions
permissions were restricted on legacy_svcproc keys in registry - also kill off two other svcproc keys
( )
