Is Elf_1.12.exe what your renamed RKill?
If so you may have to make repeated attempts to use Rkill
several times before it will run as some malware variants try to block it. If you get an alert that Rkill is infected, ignore it
. The alert is a fake warning given by the rogue software which attempts to terminate tools that try to remove it. If you see such a warning, leave the warning on the screen and then run Rkill again. By not closing the warning, this sometimes allows you to bypass the malware's attempt to protect itself so that Rkill can perform its routine.
RKill renamed iExplore.exe
has shown to be more effective.