I would definitely try and log in as a different user to see if it's only a user based virus or if it's a deep root kit(which is sorta sounds like it is)...