Persistent w.exe, BtwSvc.dll, PereSvc.exe, winlogo.exe files

A used Compaq computer was given, but it was infected with dozen trojans. I've tried System Recovery that resides on the D drive, but upon restoration, the the following files came back:

c:\windows\system32\d.bin
c:\windows\system32\w.exe
c:\windows\system32\ms.bin
c:\windows\system32\so.bin
c:\windows\system32\BtwSvc.dll
c:\windows\fonts\services.exe
C:\WINDOWS\TEMP\3qiwqjt0o.exe
C:\WINDOWS\TEMP\671vw0.exe
C:\WINDOWS\TEMP\8twyqsz.log
C:\WINDOWS\TEMP\cn0erng2.exe
C:\WINDOWS\TEMP\v7hmnua7.exe
C:\WINDOWS\TEMP\~DF65FD.tmp
C:\WINDOWS\TEMP\~DFD55.tmp
C:\WINDOWS\system32\GroupPolicy\User\Scripts\Logon\autorun.bat
C:\WINDOWS\system32\GroupPolicy\User\Scripts\Logon\winlogo.exe


Every time I remove these files from Windows TEMP folder, system32 folder and FONTS folder and restart the computer, these files came back.

I've tried Spybot Search and Destroy, and MalwareBytes to scan and removed them, but upon reboot, the malicious files returned.

I'm looking for removal methods. Thanks.

No help needed. I am convinced that the used PC is infected with a variant of Virut (Trojan.Agent/Gen-Virut[WinLogo] at C:\WINDOWS\System32\GroupPolicy\User\Scripts\Logon\winlogo.exe) which compromises .exe files in the system, including ComboFix.exe.

So I did a "destructive recovery" through Compaq's system restore partition to wipe the whole C: drive and the infections are completely gone.