Thanks for all the replies. I thought it might be a trojan but wasn't sure how to get in to scan it. Have managed to do that- run an AVG scan with the Malwarebytes- thanks Keef!!- which picked up a Zlob trojan. Restarted in normal mode and the problem was still there

.
We have always found AVG to be really good too, not sure what's going wrong here.
I will continue on with trying to get it sorted tomorrow. I haven't checked for vundo though I may. Not quite sure what direction to head at the moment, any further suggestions are most welcome