Hi, I also last week same problem, and now I have 4 infected (the one that arrived last seems not to). I tried to reinstall the software from image, change password. but nothing is needed!
If you change all 3 payment addresses, they will change again in approximately 24 hours. I tried to change only the first 2 payment addresses (leaving the last one of the virus, usually stratumtcp.com:8888) and so it seems to work! you have to live with it, otherwise you have to change the cards!