Well case closed. Wasn't the webserver after all. Apparently Windows Security was at fault (surprise surpise). Their recent update pushed out this week corrected the problem. All the users complaining of the Trojan say the pop-up threat warning has gone away.
Paul
