Previously I had found a stealth miner on my machine mining Primecoin (https://bitcointalk.org/index.php?topic=607930) but, Despite having re-installed Windows and being careful to avoid running any browser outside of a sandbox and not installing java, Today I noticed it had returned sometime in the past 2 days and its a new version.
)Now its downloading minerd from this location https://dl.dropboxusercontent.com/s/6yug7j4d6hl83o5/wmpnetwk.bin )Its mining Monero on mine.Moneropool.com using this address 4B6L2v81ehU6JFFxMH9AADhUPqe3zjZE8TUcQFzTSUwY5iESpPVwi9AhQ8HjRhPtqn9sPdDHm3qy4cbJD2bxppr6G7GN8fW I'm not the only one affected since if you check the address on the pool you can see its still mining with a high hash rate for Monero.