It would seem to me that if it keeps comming back after an AV program has removed it, one of his floppy/CD's or files on external drive is infected. I would recommend scanning all insertable media...