Any chance you can run ads that aren't paid per click and are merely static "your ad displayed here for this time period"? That way you completely work around the problem, it doesn't matter whether it's click fraud or something else (I frankly don't see why they'd need to ever install your desktop app to do click fraud).