The executables look very suspicious. I would run a scan with MalwareBytes Free to double-check this as well as deleting all restore points.