Hello and welcome to Techspot.
Boot into safe mode. See how
HERE.
Turn off system restore. See how
HERE.
In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how
HERE
Open your task manager, by pressing the ctrl/alt/delete keys together.
Click on the processes tab, and end process for(if there).
winlogin.exe
g1.exe
Close task manager.
Run HJT with no other programmes open, and have HJT fix the following, by placing a tick in the little box next to(if there).
O4 - HKCU\..\RunOnce: [winlogon] winlogin.exe
Fix all 016 DPF entries.
O23 - Service: Content Monitoring Tool (msCMTSrvc) - Unknown owner - C:\WINDOWS\system32\msCMTSrvc.exe (file missing)
Now click on the fix checked button.
Close HJT.
Click start/run, and type services.msc into the run box, and press the enter key.
When the window appears, maximise it. Locate the above 023 service, and double click on it. If it`s running, select stop. Set the startup type to disabled. Click apply/ok.
Locate, and delete the following bold files(if there).
winlogin.exe
g1.exe
Reboot into normal mode, and turn system restore back on.
Regards Howard :wave: :wave: