A used Compaq computer was given, but it was infected with dozen trojans. I've tried System Recovery that resides on the D drive, but upon restoration, the the following files came back:
c:\windows\system32\d.bin
c:\windows\system32\w.exe
c:\windows\system32\ms.bin
c:\windows\system32\so.bin
c:\windows\system32\BtwSvc.dll
c:\windows\fonts\services.exe
C:\WINDOWS\TEMP\3qiwqjt0o.exe
C:\WINDOWS\TEMP\671vw0.exe
C:\WINDOWS\TEMP\8twyqsz.log
C:\WINDOWS\TEMP\cn0erng2.exe
C:\WINDOWS\TEMP\v7hmnua7.exe
C:\WINDOWS\TEMP\~DF65FD.tmp
C:\WINDOWS\TEMP\~DFD55.tmp
C:\WINDOWS\system32\GroupPolicy\User\Scripts\Logon\autorun.bat
C:\WINDOWS\system32\GroupPolicy\User\Scripts\Logon\winlogo.exe
Every time I remove these files from Windows TEMP folder, system32 folder and FONTS folder and restart the computer, these files came back.
I've tried Spybot Search and Destroy, and MalwareBytes to scan and removed them, but upon reboot, the malicious files returned.
I'm looking for removal methods. Thanks.