HAO application ???

I busted someone coming into my network this morning using Real VNC to gain access to the computer. I could see him/her typing in a form to register for an EBay account. As soon as I touched the mouse to do a alt prntscrn they jumped out. They left several files on this computer desktop one of which was Roboform and the other was an application with "hao" under the icon. The icon was a angular blue S with a smaller blue N in the middle of the S.
Anyone know what this application is?

 

Chaslang,
It is a rather convoluted story. We usually have a closed and secure network. This was an exception which is usually how you get in trouble. Opened a hole to help someone who had been injured in a near death accident and could go through the normal proceudres. Too long to explain. The short of it was that AIRoboform was installed on this machine (by hacker) and was collecting username & passwords. They came in later and put this strange icon on the desktop (with the hao name beneath) as well as a .htm page and file folder with all the scripting to make the htm page. I was fortunate to walk in while they were working and as soon as I hit Alt Prnt Scrn they jumped out leaving all this on the desktop. Looking at the iSA firewall log the hit came from a domain in China. I would like to determine what this program is, send it to someone who can learn from it or better yet tell me what vunerablities I still have. I will not send it to just anyone though because it is malicious. I was hoping the description would help. I understand that the hck was my fault (dropped my security guard).