Using a Linux boot DVD that has never been near my network, I'd nuke the machine entirely. Then I'd set it up offline with an application-level firewall to block outgoing communication, and a limited account to block write access as much as possible across the system. I would also rebuild any other computers on your network in the same way. Before anything got back onto my network I would rebuild the router and stuff too.