System is now clean, but Avast did not detect this at all. It also had infected Adobe Reader Speed launcher (Version 7) executable and was re-installing via this exe. I am unsure of original infection vector, maybe a PDF exploit (guess) since the version of Acrobat is old. This was a customers PC, I can only recommend they upgrade that software but I doubt they will.
Latest version of Avast Free is installed and up to date.