Randomly generated? viral programs

I have 2 programs regularly popping up on my firewall asking for access to internet and trusted zone, these programs are hltbrzupkm and qhfivawiw, they reside in C:/System32 library along with another program wqeigxxbpaja all of which have same properties but no descriptions.

I have found the first two programs in my startup list and removed them but hltbrzupkm keeps getting put back.

These programs started appearing around the time of a suspected virus attached to an email and their create dates support this.

My questions are is there a definitive answer as to if these programs should be in the system32 library, can I find out what's putting them in my start up list and can I take some steps to safely delete them.

I guess the program names have been randomly generated which is why any searches return nothing.

Hi Umbilical

Click here to download HJTInstall.exe

• Save HJTInstall.exe to your desktop.
• Doubleclick on the HJTInstall.exe icon on your desktop.
• By default it will install to C:\Program Files\Trend Micro\HijackThis .
• Click on Install.
• It will create a HijackThis icon on the desktop.
• Once installed, it will launch Hijackthis.
• Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
• Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
• Come back here to this thread and Paste the log in your next reply.
• DO NOT use the AnalyseThis button, its findings are dangerous if misinterpreted.
• DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

Thanks for reply, have isolated 3 programs into a quarantine folder and renamed them, have removed program from start up and for now everything is ok.

Hi

I still recommend to follow my previous instructions

Lack of Response