Hello,
I did a search on this forum to try and find anyone else who had trouble with this: isearch.omiga-plus.com but I couldn’t find anything.
It suddenly showed up as a web reader and now I can’t get rid of it. And the thing is, I did remove it in Add/remove programs but it is still popping up instead of Firefox.
I’d be forever greatful if someone is able to help me out.
Follow the steps here and I will have a look
Thanks for your help. I hope I’ve got evereything right, it was quite a lot to follow. ;D
And here comes the last files.
Could you ensure that OTL is saved as ANSI and not Unicode please and then re-attach the log
Oh, I don’t know how to do that. And now I can’ t read the file either.
I feel like an idiot. 
How about this?
that one is correct 
We may need to reset Chrome on completion of this
Warning This fix is only relevant for this system and no other, using on another computer may cause problems
Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot
Run OTL
[*]Under the Custom Scans/Fixes box at the bottom, paste in the following
https://dl.dropbox.com/u/73555776/OTL_Fix.GIF
:Commands
[CREATERESTOREPOINT]
:OTL
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1402856248&from=mp3&uid=WDCXWD3200BEKT-75PVMT0_WD-WX71A31A2076A2076&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1402856248&from=mp3&uid=WDCXWD3200BEKT-75PVMT0_WD-WX71A31A2076A2076&q={searchTerms}
IE - HKU\S-1-5-21-329114883-2139121320-967264804-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://explorer/
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://isearch.omiga-plus.com/?type=hp&ts=1402856248&from=mp3&uid=WDCXWD3200BEKT-75PVMT0_WD-WX71A31A2076A2076"
[2014-06-15 20:17:32 | 000,000,000 | ---D | M] ("Fast Start") -- C:\Users\Ägare\AppData\Roaming\mozilla\Firefox\Profiles\mk8ie76u.default\extensions\1402856251_xpi
:Commands
[resethosts]
[emptytemp]
[Reboot]
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
Hurrah!!! My beloved firefox is back and running. Thank you ever so much!!! :-* :-* :-*
I wasn’t able to attach the adware file in it’s original state so I made into a pdf. It didn’t work either. I’m at a loss now.
How can I return your excellent help?
you can try copy and paste AdwCleaner log
Essexboy is probably offline now, but will be back tomorrow and remove the tools used if all is OK
Next you may need to reset Chrome to remove the bug from there https://support.google.com/chrome/answer/3296214?hl=en-GB
Do you have any further problems ?
Well, I’ve never used Chrome but it is installed. When I open it I only get a blank page, without a browser toolbar, so I can’t follow the instructions. Can I just uninstall it?
Certainly, I do not use it either 
How is the computer behaving now ?
It’s hunky dory.
Thank you so much for all your help. :-*
Can I do something in return?
Subject to no further problems
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean 
A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:
Download and run Delfix
https://dl.dropboxusercontent.com/u/73555776/delfix.JPG
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
CryptoPrevent install this programme to lock down and prevent crypto ransome ware
https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG
Update and run weekly to keep your system clean
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.
To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe 
Thanks again, Essex Wizard!
My pleasure
Hi I have exactly the same problem as above, except I do use chrome, please could someone also help me?
I am at my wits end, I don’t know how it got onto my system, first sweetpage which I managed to remove, but this one refuses to leave my system. I thought I was completely protected with my Avast. Reading how Annika got helped was my first glance of hope in a sea of confusion.
chantellecjackson could you follow the steps here https://forum.avast.com/index.php?topic=53253.0 and then create your own thread