it seams that the maleware creates msi update packages that wil be shared to al windows pcs in lan , also hides in nearly al storage devices .clean install only possible through non writebal dvd or clean usb isos . system stays clean til system connect to lan or non wiped ( with special software deleted hdds & mf2 )the pogram avades most of the common maleware pograms . only some maleware solutions.( regrun , thor Trend Micro product, ATTK scan ) works a feew times then he evade again ...