Hi Gringo. If I need to PM you how do I do it please. Thanks, jinksy9

Thanks Gringo. I really appreciate all your efforts with this. I will complete a 'tidy up' to remove stuff on both laptops tomorrow and will email you to let you know it's done. Many thanks, jinksy9

Hi Gringo. Hopefully router has been sorted. Result of ESET scan is:

C:\Users\Jinks\Documents\AcerInvoice.pdf JS/Exploit.Pdfka.PAV trojan
C:\Users\Jinks\Documents\jinks_laptop.pdf JS/Exploit.Pdfka.PAV trojan
C:\Users\Jinks\Documents\laptop July11.pdf JS/Trackware.ReadNotify.A application
C:\Users\Jinks\Documents\Spain Rent Exercise\SSmith Invoices\SSmith 050811.pdf JS/Trackware.ReadNotify.A application

These are the same files that it found before and you didn't think they were a particuar threat.

As these 4 files originated from the same person do you think they arrived infected?

Since the router was reset we haven't seen the malwarebytes message about blocking outgoing so it looks like that worked but what happened with the router after that was very strange. Whatever hijacked it managed to change the settings and our IT guy also found that settings for our antivirus had been affected. Hopefully everything will be ok now.
cheers, jinksy9

Hi Gringo. It seems that we've been hijacked again. Router problem was caused by something nasty changing settings. Have had to get our IT guy to come again to try to sort it. He's coming back tomorrow so I will wait until he's done before I do the stuff in your last instructions. That'll be tomorrow evening now. Cheers, jinksy9.

Hi Gringo. Sorry, we have another router problem. I've been able to get online using our old router with my laptop but can't get other laptop to conect to this router Hopefully I'll get it sorted tomorrow. I'll get back to you then. cheers, jinksy9