update on this issue. I deleted the user\app data\roaming\temp folder contents, and and windows\temp contents.
also searched on the filename reported by malwarebytes scan 'lime.js' this was found in the windows startup folder. deleted from this folder.
ran a HitmanPro scan as well, this just found some additional cookies and a couple pup objects which were removed, but don't think this helped with the trojan removal.
then restarted, reran the malwarebytes scan, this now completes clean.
thank you Maurice for the timely response, but this thread can now be closed.