Renos is very difficult to remove manually but Microsoft addressed it in their updates a while ago. hence why i suggested the update. ironically 90 percent of the time it is loaded via javascript in a web browser and sits in the dll directory taking your web browsers to sites that tell you that your computer is infected and to click ok to download the solution. which of ofcourse it isnt. im assuming your security suite is up to date enough to stop it running, just not able to find and remove all traces of it from the system folders.