Hi Neal,
Thanks for the link, I have downloaded Dr Web, and will post in due course.
Seeing Spybot mentioned in your sig reminded me of something rather strange that happened last evening.
While downloading the latest from Microsoft I got an alert from Spybot saying it had detected and blocked Virtumonde in one of the downloading files, it was a in a NET framework update or service pack. I was thunderstruck, don't think I have seen malware caught in the act before.
After the restart Spybot took command of the computer and ran a full scan lasting over an hour, which turned up nothing.
Not sure what to make of this, I doubt it was actually from Microsoft. Or if it was I don't know how to contact them, they are so bureaucratic, a "Contact us" button perhaps? (joke). So is this how the things get in, they "see" a download in progress, and slip in hoping not to be noticed?