Ok, please do the following. Run HJT again and select Do system scan only. Check the following.
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yaho...st_current.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/27a3c507...p/RdxIE601.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/...ampx_en_dl.cab
Click Fix Checked
---------------------------------------------------------
We need to remove an 023 Service
1. Go to Start > Run and type in Services.msc then click OK
Click the Extended tab.
Scroll down until you find the service.
Remote Procedure Call (RPC) Helper
Click once on the service to highlight it.
Click Stop
Right-Click on the service.
Click on 'Properties'
Select the 'General' tab
Click the Arrow-down tab on the right-hand side on the 'Start-up Type' box
From the drop-down menu, click on 'Disabled'
Click the 'Apply' tab, then click 'OK'
Now:
1. Open HJT
2. Click on Config>>Misc Tools>>Delete an NT Service
3. Type Remote Procedure Call (RPC) Helper in the space provided and click OK
4. The program will ask you to REBOOT --- Accept
5. REBOOT into SAFE MODE
6. Using Windows Explorer, locate and DELETE the following file (if it still is present):
C:\WINDOWS\apiqk32.exe
7. REBOOT back into Normal Mode
---------------------------------------------------------
Please download the trial version of Ewido Security Suite here:
http://www.ewido.net/en/download/
Install it, and update the definitions to the newest files.
Please run Ewido,and save the logfile from the scan
Save the log file
------------------------------------------------------------
Just go ahead and remove the programs you mentioned thru the Add\Remove programs list.
Please post a new HJT og, and the ewido log, and we will continue with the fix
