Ran Malwarebytes again and found another exploit. Third time lucky is now clean - both logs attached!