>>34679913 (OP)
What I did last time I saw anything like I just booted up into a linux livedisk and deleted the file that holds all the start up files.
I think it was like here
C:\Users\Username\AppData\Roaming\Microsoft\Windows\Start Menu\Program\Startup\ctfmon.lnk