Metropoliton police virus.

baz

Thank you.i will report back my failings/results.
Cheers

peter_the_piper

Thanks for the advice, the girls tried to get it sorted by themselves with limited success. Its now coming home for Moi to sort.

waddler_8

peter_the_piper wrote: »

Its now coming home for Moi to sort.

When you get it, see if it'll boot safe mode. If you can, use regedit from there. Check the winlogon key and the shell & userinit values for randomly named files added to the value data. Also check the HKCU and HKLM run keys. Once you've found the load point, that should give you the location of the .exe

It may even be as easy as running a quick mbam scan to remove it. If it does, then boot normal mode and re-run mbam from there.

waddler_8

baz wrote: »

....the computer on it only works in safe mode.

If the computer will start in safe mode, run a quick scan with mbam.

http://www.malwarebytes.org/products/malwarebytes_free

If it works, boot normal mode and re-run mbam from there (quick scan).