New type of spyware?

Hello All,

I recently found a customers PC infected with spyware, running processes were Routing.exe and perfmons.exe. The strange thing i had noticed with this PC is that every once in a while it would play a sound clip from an mp3 file (sounded like a rock clip, with electric guitar) this clip played for about 5-10 seconds. The funny thing is that this person has no music on her PC aside from the sample music that comes with XP. Anyone else experienced this problem? Removal was simple, net stop routing, net stop perfmons and delete the files from system32.

It really gets me though, where the sound was comming from (ie: website, trojan downloader?). Let me know if you've had a similar experience.