For the past few days my computer has been unusually slow. It takes longer than usual to open a website (it never takes that long normally) and sometimes the page doesn’t load at all. It says:
"Oops! Google Chrome could not connect to *insert site name(
Try reloading the page."
On the chance it could be something I decided to go ahead and get a computer check up. The logs will be attached momentarily.
Attachments…
uploaded old MBAM scan. Here is the new one i did.
Hi,
Let’s start with ComboFix to see where will this leads us.
Instructions how to disable avast:
[*]Right click on the avast! system tray icon (
http://www.mcshield.net/pg/images/avast5.png
) in the lower right corner of the screen and scroll up to avast! shield controls;
[*]In the menu that appears, choose Disable Permanently. When you are prompted to turn off security, click Yes.
Note: Do not forget to turn back on this option after the cleaning by choosing avast! shield controls > Enable all shield options.
[i][size=7pt]- ComboFix will display DISCLAIMER of warranty on software.
By clicking I Agree ComboFix shall continue.
Here it is.
Ok, ComboFix did what was in his best. The first thing we need to do after the treatment with ComboFix is to get a better look at what else may be running on your machine.
Please download Farbar Recovery Scan Tool (
http://www.mcshield.net/personal/magna86/Images/FRST_canned.png
) by Farbar and save it to your desktop.
Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.
[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
Here are the next ones!
FRST showed a couple of bad entries that ComboFix failed to recognize. We shall use FRSTScript line to fix that + it will allow me to obtain additional info about some service items.
This shall also clean your temp files additionally although ComboFix has already done that for us in his run.
1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
Start
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {4C4D2E40-A2DE-46AE-8407-560739A8FF76} URL =
SearchScopes: HKCU - {4C4D2E40-A2DE-46AE-8407-560739A8FF76} URL =
CHR HKLM-x32\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Users\Meisha\AppData\Local\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => ?
AlternateDataStreams: C:\Users\Meisha\Cookies:w2MvtQU5LNms5QgqB4Iecbz
AlternateDataStreams: C:\Users\Meisha\Cookies:YvmhhWTQi1nNeAMiBBwxPmG2
C:\Users\Meisha\AppData\Local\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx
CMD: tasklist /svc
CMD: DEL %TEMP%\*.* /F /S /Q
CMD: RD /S /Q %TEMP%
End
2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.
Okay, here is this one. Hope I got it right! 
Hi,
Yes you did it right. 
FRST warns us that it is necessary to reboot the machine.
Do so, and then tell me how your machines behave now?
Okay, I restarted it and so far everything seems good! The internet also isn’t acting slow anymore.
You are malware free. Posted logs are now appear cleans and show no signs of active infection.
Good workman always cleans up after himself.
• The following will implement some post-cleanup procedures:
It is necessary to uninstall ComboFix :
[*] Click Start (or
http://amf.mycity.rs/pg/images/VistaStartButton.png
) then Run.
On Windows7 or Vista you may use Start Search field if Run is not available.
[*] In the line of text type in (Copy) the following:
ComboFix /Uninstall
Note that there is a space between " ComboFix " and " /Uninstall " .
[*] then click OK (or press Enter ).
Wait for the uninstall process is complete.
=> Please download DelFix by Xplode to your Desktop.
Run the tool and check the following boxes below;
[i]
http://www.mcshield.net/personal/magna86/Images/checkmark.png
Remove disinfection tools
http://www.mcshield.net/personal/magna86/Images/checkmark.png
Create registry backup
http://www.mcshield.net/personal/magna86/Images/checkmark.png
Purge System Restore [/i]
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:[b]DelFix.txt[/b])
The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.
• To help AntiVirus to protect your computer and speed it up, I recommend that you download, install and keep the following free programs:
Keep Malwarebytes Anti-Malware, update it regularly or from time to time and run a Quick Scan weekly.
Malwarebytes will detect and remove all traces of known malware. MBAM isn’t AntiVirus and it can NOT replace it.
Keep MCShield Anti-Malware, the tool will be updated regularly and perform auto-checking for malware to each attached USB memory device.
MCShield, has been designed as a lightweight scanner that’s smart enough to catch even new worms and work in fully automatic removal mode.
It’s recommended to delete Temporary Files every once in a while. Run the tool and click on the Start button and TFC will begin to clean. Then restart the computer.
Temp File Cleaner aka TFC by OldTimer
TFC is small & usefull utility that shall clean up temp files from all userprofiles and system folders.
I’ve followed your last instructions and just want to say thank you for the help! I just have one question. Do you recommend that I change my passwords now or it’s not necessary for the moment?
Thanks again. 
Personally I think it isn’t necessary to do that at this moment as you did not have malware with spaware behavior. You also have to keep in mind that changing the passwords is always a useful thing and good idea for personal safety.
Okay, got it!