Is there any way I can repair my infected .exe files?

[Puppetmasterjjk]

A couple of days ago, I got the W32/Stanit http://www.avira.com/en/threats/section/fulldetails/id_vir/2661/w32_stanit.html Virus. Basically, It runs a tiny .BAT file that connects you to a specific IP and downloads some tiny files which disables network connections, windows fire wall, and rebooting Windows in normal mode. After backing up most of my Program files and my music onto my external harddrive in safe mode, I performed a system restore.

My computer is then working fine, I decided to try transferring a couple of my commonly used programs onto the freshly restored computer. Little did I know, the W32/Stantit Virus had already spread to EVERY .exe file on the external HDD and now onto the computer.

I restored it again, this time I downloaded Avira Antivir to scan all of the files on the External drive. The scan is showing a total of 1930 W32/Stanit infected files, all of which are .exe (save a few .rar files, which I assume means that the .exe in the .rar is infected).

Now, the options I am given by Avira are, A. Restore them B. Delete them or C. Leave them as quarantined. Of course, I would like to, if at all possible, repair the .exe files, is there a program out there that I haven't been able to find that can do this?

Also, would it be safe right now to transfer my music files? They all appear to be safe.

Thanks.

- Joe

Edit: Logfiles are now attached.

[recovering disk space -- attachment deleted by admin]

[iamtonsoffun247]

Did you try looking here:  http://www.computerhope.com/forum/index.php/topic,46313.0.html

Try and see if you can follow the steps on this, and post back the 3 logs.  Then a malware removal specialist will be with you to help you get rid of this nasty little bug 

[Puppetmasterjjk]

I hate to do this, but...



Bump.

[evilfantasy]

What sort of exe files are these that are infected? Is it anything you can delete and then re-download?

[Puppetmasterjjk]

Thanks for the reply.

Most of the .exe files infected are rather small. (the usual sized ones for running games and programs) I do, however have tons of large installation files which are also infected. Most of the files, big and small, are replaceable, but, since there's such a massive number of them, it's definitely going to be a pain in the a*s replacing them all.

[evilfantasy]

You can try running Dr Web and see if it will repair them, if not there isn't much of a choice.

Download DrWeb CureIt & save it to your desktop.

Scan with DrWeb-CureIt as follows:

• Double-click on drweb-cureit.exe and then click Start.
  
• An Express Scan of your PC notice will appear.
  
• Under Start the Express Scan Now Click OK to start.
  • This is a short scan that will scan the files currently running in memory.
  • If or when something is found, click the Yes button when it asks you if you want to cure it.
• Once the short scan has finished, Click Options > Change settings
  
• Choose the Scan tab and UNcheck Heuristic analysis and click OK
  
• Back at the main window, select the Complete scan button.
  
• Then click the Green Arrow Start Scanning button on the right and the scan will start.
  • Click Yes to all if it asks if you want to cure/move any file(s).
• When the scan is done.
• In the Dr.Web CureIt menu on top left, click File and choose Save report list.
  
• Save the DrWeb.csv report to your Desktop.
  
• Exit Dr.Web Cureit.

• Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.

[/COLOR]

• After reboot, Right-click the Dr.Web log on the desktop and choose Open With > Notepad
  
• Copy and paste that log in the next reply

[Puppetmasterjjk]

Sometime during the scan, my space bar was disabled, the only way I can space is by holding shift. I've tried uninstalling the keyboard driver and restarting my computer. Can someone help me fix this?

The only option I was given by the cleaning tool was to delete the files, I guess I'm out of luck.

...And now I can barely type my paper that's due tomorrow.

[evilfantasy]

Do a system restore.

[Puppetmasterjjk]

I almost forgot to say thanks a lot for the suggestions. Looks like I'll have to delete the .exe's anyway though.