Question : Braviax.exe not removable as SDFix.exe won't open...

Two days ago braviax.exe ended up on a computer that had Kaspersky 7.0 installed and being updated daily. The Kaspersky update ran an 12:33 noon according to file time stamps. At either 1:07 or 2:43 pm braviax.exe got installed and then something called winreanimator.exe got installed.
Hijackthis does not start when an attempt to open it is made.
Kaspersky will not start (does not show in the bottom right hand any longer - had to look at files in the directory to identify ver 7...125 )
Downloaded SDFix.exe on another computer and copied it to the infected one - but in both safe mode and regular mode it will not open.
All files that are named winrean*.* have been removed off of the drive.
All files time stamped 1pm thru 2:50 pm on the 23rd have been removed off of the drive.
All files braviax.exe(file size 16896) and winivstr.exe(file size 308712) have been removed (in safe mode) but they keep coming back at next reboot SO I did a copy con to write a junk text string to the file names making the files less than 1k in size and then made the files read only.
Now when the computer boots the HK in Run again shows the braviax.exe to run and the desktop shows a dos screen that has just finished running autoexec.nt ( I checked it and it shows a line I enetered that says Set StaNum-1) with a C: prompt followed by a flashing cursor, as though a program had started.

How does the braviax.exe get rmoved when programs can't be installed?
 

Answer : Braviax.exe not removable as SDFix.exe won't open...

Three of these responses were helpful. What go the comuter back on line was...
Using computer offline (when on line it would keep downloading a file called installer.exe and files size 308712 - the same size as winivstr.exe that I suspected as being one of the responsible ones) and in safe mode when normal did not allow...
1) copy con to write a junk text string to and replace, winreanimator.exe and braviax.exe, making the files less than 1k in size and then made the files read only.
2) rpggamer's list of registry entries were used to strip out occurances of winreanimator, bravaix, and all entries in those areas were either empty or known entries.
3) renamining a file (think its name was cru629.dat) and deleted beep.sys - both based on the time and date stamps that  they showed up with.
4) was then able to unistall kaspersky, hijack and reinstalled both. Kaspersky caught the renamed 696 files and removed them as well as finding win32.smail.cbo and adware.win32.Agent.zo
Unit then rebooted without pop up or autoexec.nt window and error message about 16bit eror screen pops up sayinhg it cannot run c:\windows\system32\bravaix.exe
Computer has now been working for 4 days without noticable issues.
NONE THE LESS, I don't believe that what ever program kept reinstalling braviax.exe and winreanimator has been dealt. Will try running the new info on SDFix.zip on Wednesday when I am back in town.
Random Solutions  
 
programming4us programming4us