SAV Corporate 10 keeps popping up with file 403.exe infected with packed.generic.200

Says location is windows\temp.  Cleaned\deleted, but pops up again in just a few seconds.

 

Downloaded Malwarebytes as secondary scan, but it finds NOTHING on the machine. 

 

Changed view to show hidden files\folders etc...uninstalled the SAV client to stop the services...deleted EVERYTHING in windows\temp.

 

Reinstalled, rebooted.  Still getting message.  Malwarebytes still not finding anything.

 

Searched registry for 403.exe...nothing.  Seems like some crazed problem that Symantec is having "letting go".