Posted 21 January 2010 - 09:06 PM
I have/had a very similar trojan (and possibly the same one as you, in combination with others).
RKill will close and refresh Windows Explorer, which is probably why you are receiving the dialogue asking if you want to continue in Safe Mode, as if you are starting up again. It sounds like RKill may be working, to me.
I had a similar problem, where my malware was blocking MBAM. I don't know if you've tried this, but... What I did to make it work was: I created a random folder on my desktop (I called it "fixin" - Ha), copied everything out of the directory MBAM created when it installed, and pasted that copy in my new folder. Then I renamed MBAM something random (I called it "SOS"). After I completed those steps, I ran RKill, then MBAM, and it worked.
If it doesn't work, since you're not deleting your original copy of MBAM, all you're out is that you have a junk folder to delete, eh?
(I caution you with the above advice that while I might think I'm pretty good at fixing my own computer, I am by no means an expert.)