This malware is evolving and now blocks safe mode so the only realistic way to remove it is from outside windows. If someone gets this, as far they as they are concerned there is no distinction between virus or malware