The steps you layed out worked for me, but I didn't need to use rkill.exe just windows task manager. Here's how I did it.
In my case "ThinkPoint" had already taken over my computer and forced a restart into it's forced "safe startup" (the normal startup button is greyed out in the ThinkPoint window).
So, if you are lucky and catch it early you may not get to that point. You should just be able to right-click on the taskbar and click "Start Task Manager" or press Ctrl + Alt + Delete and click "Start Task Manager" at the bottom of the list of the log on screen that comes up (in Windows 7), click on the "Processes" tab, click and highlight "Hotfix.exe" (or "hotfix.exe" can't exactly remember), and click "End Task". If it asks you "are you sure you want to end this task?" click yes. This will close the "ThinkPoint" program.
If your computer was forced into a restart, once the "ThinkPoint" window comes up you can either press Ctrl + Alt + Delete and click "Start Task Manager" at the bottom of the list of the log on screen that comes up (in Windows 7), click on the "Processes" tab, click and highlight "Hotfix.exe" (or "hotfix.exe" can't exactly remember), and click "End Task" to stop the "ThinkPoint" program (this will just give you a black screen if you don't do anything else), then click on the "Applications" tab of the task manager, click the "New Task..." button on the bottom right, and type in "explorer.exe" in the blank box of the window that pops up, then click "ok" (this will start windows explorer and your desktop should start up as normal) or you could wait the 5 - 10 minutes for the "ThinkPoint" program to run its fake virus scan. (I'd go for the first option and save yourself some time!)
(BTW this "ThinkPoint" program runs on start up even in safe mode, so you don't need to bother doing that, just stop the process and remove it)
Either way you must now get rid of the virus. Here are the steps I took to do that.
1.) End the "Hotfix.exe" process
2.) Go to...
C:\Users\**YOUR USERNAME HERE**\AppData\Roaming
(on Windows Vista and Windows 7, on Windows XP it will be under something like
C:\**YOUR USERNAME HERE**\Documents and Settings\LocalSettings )
and delete "Hotfix.exe" that is in that folder. (you must have stopped the process before you will be allowed to delete the file)
3.) Go to...
and click on the "Download Free Version" button which will take you to a CNET download page. This will download the latest version of Malwarebytes Anti-Malware software.
4.) Install the Malwarebytes Anti-Malware software, and at the end of the setup make sure the two boxes are checked for update now and run now.
5.) Run the "Full Scan" on Malwarebytes Anti-Malware and remove all detected malware.
Now you should be good to go!
It worked for me! Best of luck!