[Mr. K]

you have to find out what it is called and search for that three letter program in the registry

that is the only way to remove it permanently

[jim macomber]

I may not be out of the woods yet. Ran a scan this AM and Malwarebytes showed a different virus - TrojanFakeMS. Malwarebytes said it removed but when I rebooted it was still there. I noted the location of the file: C:\Users\Jim\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\5807ede2-62d57432.

Ran full Malwarebytes scan again and this time it says no detection. But if I go into Windows Explorer and look, this file is still in the same place. It says file size is 1kb. Does that seem right? Can I just manually delete this file? Just hit delete in Windows Explorer?

What happens if I uninstall JAVA entirely? I did note that, as the scan was running, the Java shield was flashing asking for permission to update. Might Java updating clear out the bad file?

Also, I backed-up the registry and started to look and realized I didn't know where to look. A ton of files seem to have three-letter names.