But looks and acts suspiciously like a virus or other malcontent
Agreed. I wasted 15 minutes during a support call tracking down thi randomly-named program running out of Windows\Temp. Yet another reason I'm not using Trend...
Many viruses now target antivirus and antispyware by searching for and renaming static named services. The file is randomly named to prevent such targeted attacks - other programmes use exactly the same routine to guard protective services (Rootkitrevealer being one that comes to mind). The icon is identical to ofcdog.exe (a Trend client file). It took me five minutes, tops, to work out what the file was.
In looking at the documentation for my own SBS 2003 OEM box (which can be found online here), it dawned...