Followed Read me sticky instructions but i think im still infected.

Ok, so I had a virus or something that disabled system restore, task manager, tweak ui, regedit, and a few other things by saying that they were disabled by the administrator. I can access these things now but when I did the steps in the read me there were still some things found that were not removed. Also, I seem to have a lot of processes running all the time. Im not sure if this is normal or not but it seems suspicious. Ive attaced bdscan, activescan, and my hijackthis log. Am I still infected?

 

Then you should have run Ewido Anti-Malware as part of that pocedure. Post teh Ewido log.

There is no AV program or Firewall installed?

I see that you are running msconfig in /auto mode which means that you may have selectively removed some items in the past from the startup procedure. This can be bad if they are malware, reenable those startup entries by doing the following:

Please click on start, then run, and type msconfig and then press enter. When the window opens click on the startup tab and make sure there are checkmarks in every entry. Then press ok until you are out of the program. If it asks to reboot, do not reboot.

Now please create a new Hijackthis Log and post it as a reply.

 

These things were disabled from my startup:
svchost
sstray
nvmtray
PDVDServ

svchost.exe I disabled myself because when I ran AVG antivirus, it found a virus in some svchost thing and deleted it, so now start my computer I get error messages that the file isnt there. I just disabled it at startup so I didnt get the error anymore.

I reenabled all the things in the startup and ran hijackthis again. I also downloaded and full scanned with ewido and posted the log.

 

The Ewido Scan Report is blank.

Download
- Pocket Killbox

Run HijackThis. Click the 'Do a system scan only' button. Place a checkmark in the box next to the following lines:

Click on the 'Fix checked' button. Wait for HijackThis to finish; close HijackThis.

Now run Pocket Killbox:

Choose Tools -> Delete Temp Files and click the RED X.

Run Killbox.exe. Paste the below filenames into KILL BOX one at a time. Check mark the box that says "Delete on Reboot" and checkmark the box "Unregister DLL" (If available) Click the RED X and it will ask you to confirm the file for deletion say YES and when the next box opens prompting you to reboot now...click NO...and proceed with the next file. Once you get to the last one click YES and it will reboot. Note many of the file list below may not exist but we need to check for them anyway.

If Killbox does not reboot or you get a Pending Operations type error message just reboot your PC yourself.

Now boot into SAFE MODE

Go to Start -> Run and type: cleanmgr and then click OK. Make sure the boxes for these are checked:
Temporary Files
Temporary Internet Files
Recycle Bin

And Click OK.

REBOOT to Normal Mode.

Post a fresh HijackThis log.

 

Ok, I did all the steps and here is the new log.

 

<< The installed version of Java on this compter is out-dated. Install version 1.5.0_07 available from http://java.sun.com/javase/downloads/index.jsp. Uninstall all older versions of Java on your computer, before installing the latest version of Java. >>

In Safe Mode, delete the following files:
C:\WINDOWS\system32\bx260.exe
D:\New Backup Job.C000

Reboot

How is your computer running?

 

It seems to be running pretty well. Thank you very much for all your help.

 

Flush all your restore points and create a new clean one for your system.

Disable And Enable System Restore
How to Protect yourself from malware!

Safe surfing.