[techkid]

Hi all.

I am helping a friend with a computer infected with the false AV Antivir Solution Pro (see advisory: http://www.precisesecurity.com/rogue...-solution-pro/). In a lucky turn of events, the program crashed and I was able to disable it from startup, and removed it using SUPERAntiSpyware. But I am not convinced that the system is clean, so I am looking to ask for assistance in checking the HJT logs (I will post "before" and "after" logs to show what has been done so far) so I can be satisfied in returning the system to good health.

[techkid]

I have reviewed my second HJT log (after the removal of Antivir Solution Pro), and have revealed these two lines at the bottom of the log:

O23 - Service: Windows Management Instrumentation Driver Extensions WmiIJPLMSVC (WmiIJPLMSVC) - Unknown owner - C:\WINDOWS\system32\apphelph.exe (file missing)
O23 - Service: Security Center wscsvcDcomLaunch (wscsvcDcomLaunch) - Unknown owner - C:\WINDOWS\system32\activedsp.exe (file missing)

Both files, when I did a search online, seem to refer to Trojan virus, although the sites I looked at failed to say what sort, exactly. Although it does say (file missing) on both entries, I am sceptical as to whether the system is actually clean. Thank you in advance.

[techkid]

The computer owner has gotten impatient and has taken the machine as is, despite me telling him that it is not 100% clean. Some people have no patience...

Well thank you for your time anyway. I'm sorry I can't stay for a resolution though.