For me, PestPatrol works wonders. Also, maybe that they did find the password or something through an FTP service or whatever. Definitely try doing daily or weekly tests of any server or machine you have to make sure you aren't infected with Virii, Trojans, Spyware, etc..