TR4A, thanks for the "heads-up" on Kdll.dll. Sure enough it was right there in C
Windows\System created at the time of the offending Virus download. However it seemed not to have been modified afterwards.
Have suitably hidden it in case Windows wants it back for some reason.