finally got pissed enough to find out how to get rid of it
from user don colt
at http://www.spywareinfoforum.com/index.php?showtopic=88150
Hey everyone,
Just wanted you to know there is a new veresion of revelent knowledge out.
It hit my system today and infected my browser. It's a tricky rascal because
when you start windows normally it starts and creates the file rlvknlg.exe
in your windows\system32 folder and windows\system32\prefetch . When you
delete it from prefetch it just recreates itself. When you reboot in safe
mode it's nolonger in the windows'system32 folder.
The key is in the registry. Boot in safe mode and run regedit. Do a find
rlvknlg.exe and you'll fined it and remove it. It will be right back soon as
you reboot normally. So while your in the registry the first time after you
find all the rlvknlg.exe keys and values, find a file that's named
RKINST~.osa That is the culprit that keeps reinstalling the rlvknlg.exe to
your system32 and prefetch folders. Okay hope that helps somebody out there.