but Malwarebytes is still seeing requests to bad URLs so I know its still there lurking.
when not doing anything .....or when surfing the net?