Thanks Maniac. I appreciate your help. I disconnected that machine yesterday but only realized this might be more serious when the problems persisted after I thought it was clean. Based on what you said it is even worse than I suspected. Was not aware of benefits of being a paying customer so if that is the best route I can do that. I got the MBAM Pro trial yesterday because it was the fastest way to get it without exposing passwords or credit card information through my system. After seeing MSE let viruses through and reading up on this I had decided to buy Pro to use in addition to MSE anyway. Here is my status. I have a new laptop onsite that I was getting ready to switch to anyway, so switching to that machine immediately followed by a clean install on the old one is not a problem if that will fix the old one. Only things I have to do before switching is export the Outlook 2007 pst folder to the USB backup (unfortunately connected to the infected machine), setup email accounts on the new machine, and move the backup drive to the new machine. Note that the infected machine is also hooked up to a wireless network (three computers but no server). Have had no virus symptoms on the other machines yet, and the new laptop has not been connected to the network recently (last 30 days). Beyond the password and identity theft issues my concern is infections on the USB backup, and I cannot hook it up to the new machine until it is clean. The files on the backup drive include an old system image from Dec2011 or Jan2012, which is 6 months before virus symptoms showed up in last week's MSE scan. The drive also has recent document, photo, and spreadsheet files, plus a recent Outlook pst file. Based on what you said I see the tasks in order of importance as: 1. Change passwords 2. Notify relevant parties (already have identify theft monitoring that is locked down for opening of new accounts) 3. Get the backup drive clean so I can use the files on that drive. 4. Deal with the old laptop. I welcome suggested changes to the list and I really need help with items 3 and 4. Also welcome your thoughts on how to handle infections on the backup drive and about possible network infections. John