OmegaKiller 1.2 doenst remove searchbar

Unknown

Hi, I just ran OmegaKiller 1.2 and this is its log:

Running pass number: 1

- enumerating modules
- hidden module found in: \Device\HarddiskVolume1\Program Files\Internet Explorer\IEXPLORE.EXE
c:\documents and settings\all users\application data\wipesurfsettingscopy\download cash.exe
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks

- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants

- scanning BHO's
- scanning toolbars


Running pass number: 2

- killing Internet Explorer

- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks

- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants

- scanning BHO's
- scanning toolbars


Running pass number: 3

- killing Internet Explorer

- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks

- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants

- scanning BHO's
- scanning toolbars


Running pass number: 4

- killing Internet Explorer

- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks

- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants

- scanning BHO's
- scanning toolbars


Running pass number: 5

- killing Internet Explorer

- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks

- scanning running processes..
- infection in memory: c:\progra~1\funkfi~1\idlemo~1.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants

- scanning BHO's
- scanning toolbars

- no infections found, system clean on pass number: 5 ...
- all done ...

---

But now when I run Internet Explorer the omegasearchbar is still there...

Dexter

Please see this thread and follow the instructions in Post #1 to run Ad Aware and Spybot, then follow Post #2 to run Hijack This. Post your Hijack This log file here in this thread, and we will have a look at for you.

It is possible that a new version of the hijack has come out. It's been about 10 days since we released v 1.2, and so far the people behind this hijack have been releasing changes 7 to 10 days after our updates, so they are about due.

Dexter...