The more effective process of removal is also the more involved by first starting the system in the safe mode. Just as the post tests complete you use the F8 boot menu to select that boot option and proceed to manually delete each copy of the ravmon.exe while Windows is operating in it's basic shell only. Being logged on as administrator gives you full access to remove the registry entries as well as the individual copies.