I just got this a couple days ago. Was looking at it yesterday. It seems that ANY file created as "*TEST.exe" gets created but is completely invisible to directory searches. You can "copy con ABCTest.exe" as an example and change contents even though you cannot see file (but can view contents via "type ABCTest.exe"). You then cannot remove that directory because you cannot delete the file. Booting to "safe mode w/ command prompt" changes nothing. I booted safe mode and then killed as many processes/services as possible without shutting down PC. It seems to be in one of the core processes as none of them seemed to have an unusual name (I work on computers).
I'm thinking of booting NTFSDOS program from diskette/CD or the like to try a DOS mode scan. Please advise