Malvare that opens everything in Temp files

Hello peeps, new here. My friend has some malware that opens up most files in TEMP folder onto his screen on startup. He doesn't know the origin, nor where it's located. He doesn't downloaded pirated games, but his dad does do..... stuff on it. Is there anyone that knows what this could be?

files folder games hello malware origin pirated screen startup