Outbound scanning problem

Have an NT server which is doing outbound scanning. We’ve found the system is attempting to contact Symantec Corporate AV clients. This software is not installed on this unit, so we’re sure it is a virus/worm. Our ISP has disabled Internet access due to the amount of outbound scanning traffic. The AV software has not found any reference to this issue. Any suggestions would be greatly appreciated.