Then it must have been there for a while....have you found from your BC or AV provider if they have seen this before? If so it may be worth on a test rig, restore from a couple of weeks ago and apply the patch/ fix they suggest. That will hopefully close the door.