Could be either one.

At my company, if a "cleaned" machine get's hit again within a week, we wipe the hard drive and reinstall Windows and all of the software again. That usually fixes the issue once and for all.