All this new information is helpful.
When he "went into safe mode and just deleted the files", did he uninstall the program or just manually try and delete files.
For starters, are you getting valid IP address information assigned. (Start / run / CMD, then run IPCONFIG /all)
Can you ping 4.2.2.1
Can you ping
www.yahoo.com