Think I caught it early as that was really easy.
Msconfig > startup > find program disable> run malwarebytes.
Other variations lock and change files thus one didn't or didn't get a chance before I shut down the pc.