He started with norton, then rather than pay he tried macaffe but that allowed the virus to enter, it had avast when I took it over and that just gave warnings, to remove was to pay.
Malwarebytes got rid of the virus but left the signature somewhere in a start up file which I cannot find