System Analyzer automatically starting

Well I'm expressed just the same...administrator of 1400+ computers! Really? Nice to have you on board with Webroot..

@ There are an amazing number of places in the Windows system that an application can use to start automatically. If the application doesn't remove itself, it will just keep being triggered to launch automatically. This is due to the extremely extensible and customizable nature of Windows, there's a lot you can inject into and modify. It's a security nightmare, but it's that way for a reason. Sysinternals Autoruns will show you almost every place something can hide to start automatically, but it's never a complete listing of every possible way, for various technical reasons.
 
For example, DLL Preloading, which is about as fun as it sounds
http://blogs.technet.com/b/srd/archive/2010/08/23/more-information-about-dll-preloading-remote-attack-vector.aspx
 
Yeah, computer security is really, really, really hard or impossible once you have something malicious on your PC. In the corporate world, if you get a virus the entire computer gets rebuilt, end of discussion (unless there's an internal department that can handle forensic investigation, but the employee is still getting another computer.) That's why Webroot's journaling tech is such a good solution; it can pretty reliably remove every trace of something trying to hide in most situations. It's good stuff. If it was crappy - trust me - I wouldn't be here.