did you post that log from safe mode as it's a very small log! You don't appear to ahve either a firewall or an anti virus programme! Download 1 of each from the list below and install them!
free anti-virus tools
AVG7 from
Anti-vir
Avast 4 from
free firewalls
sygate
you'll need to remove these properly and fix your registry for this pest!
Click:
to download cwsserviceremove.zip and unzip it to your desktop.
Download the pocket killbox
*Download Cleanup from Here
* A window will open and choose SAVE, then DESKTOP as the destination.
* On your Desktop, click on Cleanup40.exe icon.
* Then, click RUN and place a checkmark beside "I Agree"
* Then click NEXT followed by START and OK.
* A window will appear with many choices, keep all the defaults as set when the Slide Bar to the left is set to Standard Quality.
* Click OK
run it.
Click Start > Run > and type in:
services.msc
Click OK.
In the services window find Remote Procedure Call (RPC) Helper Right click and choose "Properties". On the "General" tab under "Service Status" click the "Stop" button to stop the service. Beside "Startup Type"
in the dropdown menu select "Disabled". Click Apply then OK. Exit the Services utility.
CAUTION: There is also a service named Remote Procedure Call (RPC) Locator and one called Remote Procedure Call (RPC) . These are the legitimate services. Do not stop those two.
Note: You may get an error here when trying to access the properties of the service. If you do get an error, just select the service and look there in the top left of the main service window and click "Stop" to stop the service. If that gives an error or it is already stopped, just skip this step and proceed with the rest.
In Hijack This, click on the "Open Misc Tools section" button. Next click the "Delete an NT service" button. Copy and paste the following in that box:
11Fßä#·ºÄÖ`I
Click OK.
Restart to safe mode.
Perform the following steps in safe mode:
Double click on the cwsserviceemove.reg file you downloaded at the beginning to enter into the registry. Answer yes when asked to have its contents added to the registry.
have hijack this fix these entries. close all browsers and programmes before
clicking FIX.
F3 - REG:win.ini: load= c:\quickenw\BILLMNDW.EXE
O2 - BHO: Class - {68F79F99-75BB-3696-AC11-DC7D8241232E} - C:\WINDOWS\addkf32.dll
O23 - Service: Remote Procedure Call (RPC) Helper ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\apijp.exe
Double-click on Killbox.exe to run it. Now put a tick by Standard File Kill. In the Full Path of File to Delete box, copy and paste each of the followinglines one at a time then click on the button that has the red circle with the
X in the middle after you enter each file. It will ask for confirmation to delete the file. Click Yes. Continue with that same procedure until you have copied and pasted all of these in the Paste Full Path of File to Delete box.
Note: It is possible that Killbox will tell you that one or more files do not exist. If that happens, just continue on with all the files. Be sure you don't miss any.
C:\WINDOWS\apijp.exe
C:\WINDOWS\addkf32.dll
run cleanup!
