I've run three a/v products on the three PCs at my client's location.
NAV, Panda, Trend-Micro.
None of them are able to crack this nut.
Main indication of malware ---
I get random letter/number names of processes in the Task Manager (XPhome in all PCs) such as...
Three or so will be running at system start, but employing EndProcess will weed them down - until after the last one is ended, then another random letter/number named process will appear within seconds.
Yes, I've run Ad-Aware.
Any other suggestions?