UPDATE: I didn't mention in my last post that I was unable to remove the files when logged onto the admin account. I had to use the account that related the documents folder that the files were located under. Stupid Media Center version. So while I was there I ran the malwarebytes scanner again and it had a couple hits. I had to cancel the scan and the results showed that there was another popcap virus and vondu. I'll rerun the scan tomorrow and post the results along with a hijackthis from that profile. Anything else I should do while I'm at it?