Omiga-Plus - how to remove it forever?

Hi alll,

Yesterday i got this irritating ad-ware program: omiga-plus. It affects all of my browsers (Internet Explorer, Google Chrome) as I see. I use Win 8.1 x64 OS.
I can not uninstall it, and tried to run avast, eset nod32, any anti malware, but nothing helped.
Then, I reinstalled my computer, formatting my SSD (re-partioning too), it was a fresh OS, but, only log in with my MS account - i think that it was synchronized my settings, and logged in to my google account to sync my google bookmarks, it taked 2 minutes, and this virus was again on my computer.
I found a program YAC (Yet Another PC Cleander http://en.wikipedia.org/wiki/Yet_Another_Cleaner ) and this program removed it as I see, but how can I be sure, that it was removed correctly, and won’t come back a bit later?

Please help me!
Thanks a lot!
Szabolcs

Attach your basic logs. (MBAM, FRST and aswMBR…!!)
Instructions: https://forum.avast.com/index.php?topic=53253.0

omiga-plus is a PUP = not virus / Possible Unwanted Program
crap programs that usually comes bundled with freeware downloads

you may turn on PUP detection in web shield and file shield

Hello guys,

I have completed the list you sent me. Please find attached the log files.

Thank You!
Szabolcs

Let me know what problems you have after this

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => "C:\PROGRA~2\SupTab\SEARCH~1.DLL" File Not Found BHO: No Name -> {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} -> No File Task: {65580F96-4088-48CF-A12D-F915E03A634A} - System32\Tasks\Installer_iwebar => C:\Users\Szabolcs\AppData\Local\Installer\Install_26145\setup.exe <==== ATTENTION CMD: bitsadmin /reset /allusers CMD: DEL %TEMP%\*.* /F /S /Q CMD: RD /S /Q %TEMP% REBOOT:

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.

Hello,

complete, please find attached the log files.

Thank You!
Szabolcs

How is the computer now ?

Hi,

Now it is fine, there is no problem. Did You see any sign of the virus i got in log files?

Thank You for helpful assistance! :slight_smile:
Regards,
Szabolcs

Yes it was buried in the Chrome startup page :slight_smile:

Subject to no further problems :slight_smile:

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean :thumbsup:

A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:

Download and run Delfix

https://dl.dropboxusercontent.com/u/73555776/delfix.JPG

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

CryptoPrevent install this programme to lock down and prevent crypto ransome ware

https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG

Malwarebytes.

Update and run weekly to keep your system clean

It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe :wave:

Hi,

my computer seems asymptomatic, no problem since your help :slight_smile:
Thank You for it!
Only one thing. Every time I run Malwarebytes Anti-Malware tool, it finds something in my chrome: PUP. Optional. ISearch.A in Users\Szabolcs\AppData\Local\Google\chrome\user Data\Default\Preferenes

Is it normal?
Thanks,
Szabolcs

Ohh, and as I see in log file, it is omiga again :frowning:
Your program deletes it, and after when i run again, it find again…

Are you synching Chrome ? If so then you will need to delete the backup synch and create a new one. Otherwise it will continue coming back

Hi!

Finally, it looks clear! :slight_smile:
Thank You for advices, I am very very grateful!
From now, I will use my computer and test for 24 hours, and will feedback one more time!

Thanks!
Regards,
Szabolcs

Was it coming back via the synch option in chrome ?

No, after deleted the sync backup, it was gone. :slight_smile: Tonight, I will run malwarebyte again…

OK so it probably was in the backup :slight_smile:

Hi guys

I followed intructions - pls find attached the log files.

Hope you can help me.

Thanks, Tomislav

Hi, could anyone please try to look at my problem as well? Tried several things but nothing helps with Omiga…

Tnx in advance!

Posting in an old thread is not really how it is done

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: 2015-01-21 21:33 - 2015-01-25 15:43 - 00000000 ____D () C:\Program Files (x86)\globalUpdate 2015-01-21 21:33 - 2015-01-21 21:33 - 00000000 ____D () C:\Users\tomis_000\AppData\Local\globalUpdate Task: {83B02C41-ECB0-45C5-90DC-72FC454F6242} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.

tnx a lot! sorry for not opening a new treatd (I’m the new one and usually very rearly use forums)

attached are logs