I am also having an issue with another spyware piece, Virtumundo. I can't even seem to delete it in safe mode, it says the file is in use. Apparently, it's attached itself to the login procedure, so since I still have to log in in safe mode, it gets launched. The only way I can think of is to remove the drive and pop it into a different machine. I was hoping for a more elegant solution though.