Working with the emergency kit on an XP Pro SP3 machine. The machine had a ransom virus (The work on your computer has been suspended on the grounds, etc etc...) asking for a payment to make the PC accessible. Although we we removed part of the virus using Malwarebytes, the virus had blocked us from getting booting into safemode. The Emergency Kit found additional items that we quaranteened but it also found two that it said had to be removed manually and we should check in this forum for assistance. The two items were: Documents and Settings\\Application Data\rvtus.dll Documents and Settings\\Application Data\uscip.dll Any suggestions on how to remove these would be appreciated.