silent
29 Aug 2004, 1:11pm
Hi, I just ran OmegaKiller 1.2 and this is its log:
Running pass number: 1
- enumerating modules
- hidden module found in: \Device\HarddiskVolume1\Program Files\Internet Explorer\IEXPLORE.EXE
c:\documents and settings\all users\application data\wipesurfsettingscopy\download cash.exe
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks
- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants
- scanning BHO's
- scanning toolbars
Running pass number: 2
- killing Internet Explorer
- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks
- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants
- scanning BHO's
- scanning toolbars
Running pass number: 3
- killing Internet Explorer
- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks
- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants
- scanning BHO's
- scanning toolbars
Running pass number: 4
- killing Internet Explorer
- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks
- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants
- scanning BHO's
- scanning toolbars
Running pass number: 5
- killing Internet Explorer
- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks
- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants
- scanning BHO's
- scanning toolbars
- no infections found, system clean on pass number: 5 ...
- all done ...
---------------------------------------------------------
But now when I run Internet Explorer the omegasearchbar is still there...
Running pass number: 1
- enumerating modules
- hidden module found in: \Device\HarddiskVolume1\Program Files\Internet Explorer\IEXPLORE.EXE
c:\documents and settings\all users\application data\wipesurfsettingscopy\download cash.exe
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks
- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants
- scanning BHO's
- scanning toolbars
Running pass number: 2
- killing Internet Explorer
- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks
- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants
- scanning BHO's
- scanning toolbars
Running pass number: 3
- killing Internet Explorer
- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks
- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants
- scanning BHO's
- scanning toolbars
Running pass number: 4
- killing Internet Explorer
- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks
- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants
- scanning BHO's
- scanning toolbars
Running pass number: 5
- killing Internet Explorer
- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks
- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants
- scanning BHO's
- scanning toolbars
- no infections found, system clean on pass number: 5 ...
- all done ...
---------------------------------------------------------
But now when I run Internet Explorer the omegasearchbar is still there...