"application cannot be executed. the file <file name>.exe is infected" (where file name changes) is what our user gets on her computer screen. Symantec is running, scanned and found a file named physysguard.exe and tried to remove it (unknown if that's a valid virus removal attempt or a real Symantec deal. We disconnected her from the network for the time being.