Do they have any AVP installed and running on the server? I have seen the same thing happening on a Windows server and it took us hours to find out that it was AVP.
Hope this helps.
thanks but no virus program running
I just got the same thing here on my development box. Restarting the adminserver process from the command line fixed it for me.