I am the only user only desktop. The problem started when a pop up appeared along with tower beeps I click cancel as soon as this pops up everytime as it is a windows pop up (seems to be to change settings or user account (says tabs, grey box, name of my pc etc etc)) The first time it happened I suddenly had more than one account/user log in available for windows. Then new one was called USER. After running what scans I could following a guide here (most proved impossible for lack of knowledge on my part (combofix and rogue links did not work) and the pop up scaring me into continuing to use PC long enough to search programs needed) , there remained just one user log in available, so I then passworded that (so to log into windows I have to enter password now) hoping this would block more access? The 'event' also happens same in safe mode and with only one user account. Router is an all in one Virgin Media super Hub. As for scans - I tried with combofix but could not as this pop up was making things happen on my pc so I had to shut down (even from safe mode) I am too cautious to allow a scan to run for a long period while this event is happening (assuming someone is trying to take control of my PC) sorry I am novice so don't know enough to well, you know.. and a bit freaked out by it all, Virgin said it was secure server when we joined and with the protection I have running I assumed this could not happen. I am about to disconect internet from tower to run full scan of malwarebytes so I can post report here, quick scan shows no infection.