Malware does not always require user interaction to download and execute. I would start by installing a couple of extra tools and scan to validate the system is clean. Windows Defender can be disabled by malware, or if malware does get the chance to execute it ca effectively hide itself from the system including endpoint protection.
If the issue persists you may want to consider taking it to an IT shop to have it professionally fixed