well it sounds like what ever crapware was on the machine has infected system files (probably because user was running as admin when infected)

So when you cleaned them or removed them...the system...