[Wicked_and_Crazy]

Solution:

Turns out there is a hidden file called C:\WINDOWS\system32\ppnsvc.exe which kept recreating facebook19.zip in C:\Documents and Settings\User\Local Settings\Temp and also creating a file called 87.exe. Renaming the ppnsvc.exe file seems to have solved the problem, as would removing all references to it from the registry