Radmin infestation

Last month we noticed a spike in CPU usage by Task manager on one of our W2K advanced servers.
Discovered some strange files in the root of the boot volume, i.e., lolipop.bat, …SBSD identified Haxdoor-H present and supposedly removed related files..
We keep getting an item in the system tray called radmin. The associated website does not help at all, and we cant remove it, it just keeps coming back.
It seems to be a piec of freeware that got used to creat a hack. This was not installed locally.
Running Symantic corporate edition 7.6, fully updated.