this is the correct fix:
Click WinKey + R to open a run box > type notepad into the open run box > OK > this will open Notepad
Click Format and make certain that Word Wrap is NOT checked.
Copy/Paste the text inside of the code box into the open Notepad
REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost] "netsvcs"=hex(7):41,65,4c,6f,6f,6b,75,70,53,76,63,00,43,65,72,74,50,72,6f,70,53,76,63,\ 00,53,43,50,6f,6c,69,63,79,53,76,63,00,6c,61,6e,6d,61,6e,73,65,72,76,65,72,\ 00,67,70,73,76,63,00,49,4b,45,45,58,54,00,41,75,64,69,6f,53,72,76,00,46,61,\ 73,74,55,73,65,72,53,77,69,74,63,68,69,6e,67,43,6f,6d,70,61,74,69,62,69,6c,\ 69,74,79,00,49,61,73,00,49,72,6d,6f,6e,00,4e,6c,61,00,4e,74,6d,73,73,76,63,\ 00,4e,57,43,57,6f,72,6b,73,74,61,74,69,6f,6e,00,4e,77,73,61,70,61,67,65,6e,\ 74,00,52,61,73,61,75,74,6f,00,52,61,73,6d,61,6e,00,52,65,6d,6f,74,65,61,63,\ 63,65,73,73,00,53,45,4e,53,00,53,68,61,72,65,64,61,63,63,65,73,73,00,53,52,\ 53,65,72,76,69,63,65,00,54,61,70,69,73,72,76,00,57,6d,69,00,57,6d,64,6d,50,\ 6d,53,70,00,54,65,72,6d,53,65,72,76,69,63,65,00,77,75,61,75,73,65,72,76,00,\ 42,49,54,53,00,53,68,65,6c,6c,48,57,44,65,74,65,63,74,69,6f,6e,00,4c,6f,67,\ 6f,6e,48,6f,75,72,73,00,50,43,41,75,64,69,74,00,68,65,6c,70,73,76,63,00,75,\ 70,6c,6f,61,64,6d,67,72,00,69,70,68,6c,70,73,76,63,00,73,65,63,6c,6f,67,6f,\ 6e,00,41,70,70,49,6e,66,6f,00,6d,73,69,73,63,73,69,00,4d,4d,43,53,53,00,77,\ 69,6e,6d,67,6d,74,00,53,65,73,73,69,6f,6e,45,6e,76,00,62,72,6f,77,73,65,72,\ 00,45,61,70,48,6f,73,74,00,73,63,68,65,64,75,6c,65,00,68,6b,6d,73,76,63,00,\ 77,65,72,63,70,6c,73,75,70,70,6f,72,74,00,50,72,6f,66,53,76,63,00,54,68,65,\ 6d,65,73,00,42,44,45,53,56,43,00,41,70,70,4d,67,6d,74,00,00
Now go to File > and click Save As,
From the drop down menu at the top of the box choose Desktop as the location to save this file.
Go down to the File Name box and type in fixme.reg as the file name, then choose All Files as the save as file type.
Then click the save button.
Once you have clicked the save button, close Notepad.
You should now see a file on your desktop that looks like this:
Locate the fixme.reg icon on your desktop and double click it, an information box will pop up asking if you want to merge the information in the file into the registry, click YES.
Once the file has run, the information will have merged with your registry so you can delete fixme.reg from your desktop as you won't be needing it any more.
Please reboot your computer.
If the reboot goes well, please run the following, if not let me know the details
Please run combofix without any script and post a fresh log
(please allow it to update if it asks to do so)
Please advise how the computer is behaving now? Is it back to normal behaviour
Edited by CatByte, 23 June 2012 - 08:17 AM.