1.) nod32 was uninstalled 2.) won't reinstall

[itman 1,659]

I'm ready to venture an opinion on what be going on with this device. Since you haven't complained about any operational issues to date, I suspect someone might have installed a backdoor coin miner. Keep an eye on your CPU usage via Task Manager for any unexpected spikes in usage percentage.

 

Edited March 16, 2020 by itman

[itman 1,659]

Just now, mtdog said:

Would that self protection options be called Tamper Protection? 

Correct.

[itman 1,659]

As far as the message appearing about another user logged on at shutdown time, it probably isn't malware related. Rather, a borked Win 10 setting.

Read through the discussion here: https://www.tenforums.com/user-accounts-family-safety/96025-windows-10-last-user-remains-logged-after-reboot.html . Note especially this posting:

Quote

Hello Ron,

You can turn off the Use my sign-in info to automatically finish setting up my device after an update or restart setting to stop this when the computer automatically restarts for an update.

Reply from poster to the above:

Brink, this weekend I stumbled against a link describing exactly what you say. This indeed solves the problem. I've now turned off this setting for all users on the computer and no more users remain logged in after a reboot.
Thanks for your help!!

Procedure to correct this here: https://www.tenforums.com/tutorials/49963-use-sign-info-auto-finish-after-update-restart-windows-10-a.html

Edited March 16, 2020 by itman