Your computer is locked. Metropolitan police

There should be another name after Trojan agent.gen like Kazy. It's needed to determine what extra steps must be run. Look in the MB log or History. Then Google it to see.

Does Malwarebytes find anything on its second run? Keep running it until it cleans everything it finds.

After that install and run a full scan with SuperAntiSpyware.

If these show clean then run SFC -SCANNOW Command to repair System files.

pcmatty said:

Greg ur saying mc afee is crap?
I thought it was the best anti virus ever.

Well it let phony Metropolitan cops into your PC.

It also causes many problems here which we resolve by removing it.

It is the worst AV of all, absolute crapware. Replace it with MSE.

Im home now. Il try these new steps.
I didnt install mc afee forgot to put any anti virus on. Was told windows firewall was safe enough ;(
Will keep u all updated

Sir George said:

pcmatty said:

It says i cnt run windows defender in safe mode.
SIr george
Ive tried that solution u said but it dnt pin point where the trojon is
I tried looking at the shell file it just says explorer.exe
Cnt see where it is.

Also tried running windows defender on my user account on laptop but as i just go to open it the pc lockup appears.

Cnt get mc afee loaded up either

Matt ;(

The link I provided has an update at the bottom. This is the update information;

"I fixed this by the following:"

As well as starting explorer and regedit at the command line also start msconfig. Select the Startup tab. It can be difficult to spot although it stuck out for me as having an absurd name, there can be more than one entry. I think the best way is to look in the location column for any entry ending with something like a string of random letters/numbers.exe, mine also had a comma with a few letters after it as well to try to confuse me. Also look for any startup item with something similar in the 'Startup Item' column. Unticking these entries and applying should prevent it starting, and the entry should reveal the path to the .exe file which you can find and delete. Be warned you can stop important programs starting up, although they try to confuse you, mine was tagged as being from the IBM corporation!

You can't just delete startup entries from msconfig. You have to use regedit. In regedit I found the offending entries here:

HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Shared Tools \ MSConfig \ startupfolder

but they might also be here:

HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Shared Tools \ MSConfig \ startupreg

hi just looking in these steps i see a suspect pzhbzllojhjqig in crogramdata\pzhbzllo.exe. location HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN ??????

also found pzhbzllojhjqig in HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Shared Tools \ MSConfig \ startupreg.

think i should delete that thing????
matt

yesssss success im back its gone :)
i deleted the suspect :)

massive thanx to all the help.
im installing windows defender now , and microsoft sercurity essentails

Matt

is it advisable to buy the full malewarebytes programme?
matt

Malwarebytes is always good protection to have, especially if you get infected.

Run a full scan now with Malwarebytes and MSE.

Run SFC -SCANNOW Command.

Yep already did that :)

How is performance. If necessary use it for a few days to be sure.

Once you are assured it's running fine, save a Win7 backup image externally so you have a path back in case you get problems in the future: Backup Complete Computer - Create an Image Backup