The "Windows System restore from safe mode" followed by downloading MalwareBytes (MBAM) and running it (don't forget to update the MBAM virus databasey-description thing first) sorted out a very similar problem on my daughter's laptop recently.
I went back a good long way for a restore date to be as sure as I could be that I wasn't restoring to a date when the infection was already present....