Mal/KovterLnk-A and Mal/KovterBat-A cannot be removed

Question

Sophos Endpoint Security and Control 10.6 running on Windows 7 Professional x64 detected Mal/KovterLnk-A and Mal/KovterBat-A this morning and moved them to Quarantine. 
 The available actions say Clean Up then goes to Cleaning Up and instantly the viruses appear in the Quarantine again. 
 
 When I open the Details that take me to the file location the shortcuts are in a the Windows Startup folder and appear and re-appear while Sophos tries to Clean Up the threat. 
 It appears as if the virus/malware is re-installing itself as soon as Sophos cleans it up. 
 
 I've tried to select and Cleanup the files, but it says a Cleanup is already in process.

QC · Accepted Answer

Hello Brent Berarducci. 
 please see the Sophos Malware Remediation Toolkit (SMaRT) . IMO it's a good walk-through and helps with a systematic approach. If you've contracted this thing as a user with administrative rights you might have to use SBAV. 
 Christian

QC · Answer

Hello Brent Berarducci , 
 I download and try to install Sophos Anti-Virus which package? The SESC stand-alone? Normally setup logs its actions in your user's %TEMP% directory (the Enterprise installer e.g. Sophos ES setup.log ) naming the "unacceptable" product(s), wonder if it's the SVRT. Could you post/show the exact error message? If I understand correctly you have SESC installed but it no longer seems to work? 
 Christian