step 1 is to stop any malware services from running use rkill for this http

/www.bleepingcomputer.com/download/rkill/
step 2 run adw cleaner or rougekiller for adware http

/www.bleepingcomputer.com/download/adwcleaner/ http

/www.bleepingcomputer.com/download/roguekiller/
reboot to save changes then test
if you notice the infection survived, repeat steps one and two followed by deleting all restore points
Open System by clicking the Start button, right-clicking Computer, and then clicking Properties.
In the left pane, click System protection. If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
Under Protection Settings, click Configure.
Under Disk Space Usage, click...