The Apple fanatics will use this as another opportunity to mention how Windows is so much more vulnerable. LOL.. This type of exploit isn't new. I've seen entire directories spoofed and the smarter hackers and script kiddies will set up honeypots, whereas you think you cleaned up all traces of the attack, only to have it persist.
Sometimes, in all our zeal, we'll forget the basics and jump straight into deeper troubleshooting when the real issue is far more simple. It's brilliant social engineering. 8)