Had bad Virut infection, now I keep getting random numbers.exe and other problems

Welcome to Major Geeks!

Nope! You are still infected. I can see many infected Windows system files and there could be many more.

Since your logs show that your Windows Operating system files have become infected and there is no known reliable fix for this. In addition there are many many other infected files. We could spend a lot of time trying to remove this infection, but odds are that it will not work because the nature of the infection has so many executable system files infected that as soon as we fix one file, other files that are infected will almost immediately or upon the next reboot, just reinfect the files. In addition, your PC would still basically be unreliable/untrustworthy even if we manage to fix the infected files that we can see since there could be many more that we are not seeing.

The safest thing for you to do is backup your personal data immediately since your PC could possible become unbootable at any point in time. Do not back up any executable files. This includes programs that you have downloaded since any of them could be infected.

Once you backup, you need to format partitions and reinstall Windows and all other required software. DO NOT reinstall from any executable type files that were backed up recently on this PC or you will just reinfect youself immediately.

 

You're welcome. We don't like to give the bad news and don't like saying you need to reinstall either but it is really the only reliable option. Attempting a cleaning will leave your PC in an untrustworthy state.

You cannot do an upgrade because of the infection. It will just infect everything as you try to upgrade. You must format to remove the infection and then start from scratch.

To get all the proper information, we would need all the logs. However if you just want to get a feeling for whether it looks like the OS files are coming up clean, you can just attach a new log from MGtools. This will not give us a 100% certification but it will let us know if you are back to the same state as right now. A full system scan with an antivirus program needs to be performed after you reinstall.

 

This is a factory recovery partition not what we call System Restore which is part of Windows.

Right now your logs look okay but you have NO protection. You need to get properly protected and you need to run a full system scan with an antivirus to make sure it comes up clean. My final instructions below give you a link on getting protected.

If you are not having any other malware problems, it is time to do our final steps:

1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
3. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
   • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
   • "%userprofile%\Desktop\combofix" /u
     • Notes: The space between the combofix" and the /u, it must be there.
     • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
   • Delete the C:\combofix folder from combofix (if it exists)
4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
5. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
6. Go to add/remove programs and uninstall HijackThis.
7. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
8. If you are running Vista, Windows XP or Windows ME, do the below:
   • Refer to the cleaning procedures in step 3 the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
   • Then reboot and Enable System Restore to create a new clean Restore Point.
9. After doing the above, you should work thru the below link:
   • How to Protect yourself from malware!