Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.



780 posts

Ultimate Geek

Subscriber

Topic # 95865 15-Jan-2012 09:00 Send private message

I have somehow ended up with an apparent virus/trojan thing called MyStart Incredibar. This takes over the browser and substitutes Incredibar for your home page. 

Uninstalled it using Revo Uninstaller but that did not get rid of the problem. I have run Malwarebytes, my ESET NOD32, SpyBot etc and although some of these came up with a few bits to be cleaned,  it didn't fix the problem. 

I have also googled quite extensively looking for a fix and although there's a lot of traffic on the subject, nothing I can see that seems to be legit or make sense.    

Does anyone know anything about this or can suggest what I should do? Thanks. 

Create new topic
586 posts

Ultimate Geek


  Reply # 569003 15-Jan-2012 09:18 Send private message

It's part of incredimail.

this program has a bad habbit of installing a few other annoying programs....ad ware etc.

BDFL
43710 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber

  Reply # 569005 15-Jan-2012 09:24 Send private message





81 posts

Master Geek


  Reply # 569009 15-Jan-2012 09:54 Send private message

Have you tried superAntispyware? http://www.superantispyware.com/

I find this better than Malwarebytes MOST times.

Otherwise you may have to do a manual removal

2201 posts

Uber Geek

Trusted
Subscriber

  Reply # 569011 15-Jan-2012 10:00 Send private message

Incredibar!!! hahaha (love the name)

follow the manual removal (Mystart.incredibar.com Manual Removal Guide)

i found it easier to deal with it manually







780 posts

Ultimate Geek

Subscriber

  Reply # 569101 15-Jan-2012 14:21 Send private message

Thanks to those who offered suggestions. Neither Windows Security Essentials nor SuperAntiSpyWare detected it.



     
nakedmolerat: Incredibar!!! hahaha (love the name)

follow the manual removal (Mystart.incredibar.com Manual Removal Guide)

i found it easier to deal with it manually



@nmr: Did you actually have the infection and get rid of it using the manual method you refer to above?

gzt

3197 posts

Uber Geek

Subscriber

  Reply # 570618 18-Jan-2012 21:55 Send private message

They advertise that all major scanners find it is spyware free:

http://www.incredimail.com/english/incredimail/safe-and-free-incredimail-download.aspx

I find SpyBot useful when nothing else is on hand. Note, it is also on the list above.



780 posts

Ultimate Geek

Subscriber

  Reply # 570688 19-Jan-2012 09:05 Send private message

gzt: They advertise that all major scanners find it is spyware free:

http://www.incredimail.com/english/incredimail/safe-and-free-incredimail-download.aspx

I find SpyBot useful when nothing else is on hand. Note, it is also on the list above.


Thanks gzt. Maybe it's not as bad and invidious as I originally suspected it was, even though there's a lot of traffic on the interwebs asking how to get rid of it.

I ran all sorts of scans (including SpyBot) and nothing detected it. At the outset it took over my homepage and I thought it was stopping me from changing the homepage back to what I wanted - but I was wrong about that. So now it's still there on my PC but not visible or obvious and I am just living with it.

gzt

3197 posts

Uber Geek

Subscriber

  Reply # 570694 19-Jan-2012 09:25 Send private message

Maybe that makes it more insidious... ; ).

I uninstalled it for a friend recently. Removing Incredimail from programs and features in control panel did the trick, maybe that was just luck.

295 posts

Ultimate Geek


  Reply # 570702 19-Jan-2012 09:51 Send private message

eracode: I have somehow ended up with an apparent virus/trojan thing called MyStart Incredibar. This takes over the browser and substitutes Incredibar for your home page.  

Does anyone know anything about this or can suggest what I should do? Thanks. 



Run   Malwarebytes in windows "safe mode" I find it works for me everytime and I have fixed many instances of this blasted thing in customer's computers this way.




mxpress

295 posts

Ultimate Geek


  Reply # 570726 19-Jan-2012 11:08 Send private message

mxpress:
eracode: I have somehow ended up with an apparent virus/trojan thing called MyStart Incredibar. This takes over the browser and substitutes Incredibar for your home page.  

Does anyone know anything about this or can suggest what I should do? Thanks. 



Run   Malwarebytes in windows "safe mode" I find it works for me everytime and I have fixed many instances of this blasted thing in customer's computers this way.



Ohh, after that, also run Spybot in safe mode as well.  Your system should then be clear Cool  




mxpress

195 posts

Master Geek


  Reply # 570793 19-Jan-2012 13:07 Send private message

A few years ago my browser hacked by a malware called 'ms4000'. It seemed that none of the anti-malware programs could fix the problems. Finally got it fixed just simply changing some settings on System Configuration : on Start Up & Services menus I unchecked some unknown or suspicious programs, tested each of them one by one, finally rid myself of the problem.



780 posts

Ultimate Geek

Subscriber

  Reply # 570828 19-Jan-2012 14:04 Send private message

mxpress:
mxpress:
eracode: I have somehow ended up with an apparent virus/trojan thing called MyStart Incredibar. This takes over the browser and substitutes Incredibar for your home page.  

Does anyone know anything about this or can suggest what I should do? Thanks. 



Run   Malwarebytes in windows "safe mode" I find it works for me everytime and I have fixed many instances of this blasted thing in customer's computers this way.



Ohh, after that, also run Spybot in safe mode as well.  Your system should then be clear Cool  


Thanks - have now done all that. The scans did not show anything and isn't showing in the apps list in Control Panel. Actually no evidence of it at all. I am thinking that maybe the detailed uninstall I did with Revo Uninstaller prior to OP had got rid of it but I was unaware of that. Sorry if this has been a storm in teacup.

Create new topic
Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when new jobs are posted to our jobs board:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:




News »

Trending now »
Hot discussions in our forums right now:

How do you fall out of a moving car ???
Created by Mark, last reply by surfisup1000 on 21-May-2013 22:40 (19 replies)
Pages... 2


A new project coming to Geekzone
Created by freitasm, last reply by xpd on 21-May-2013 21:19 (239 replies)
Pages... 14 15 16


Changeover issue: dial up
Created by Zigg, last reply by robjg63 on 21-May-2013 22:02 (17 replies)
Pages... 2


HTC One (2013) owners' discussion
Created by Dingbatt, last reply by Technofreak on 21-May-2013 22:11 (1508 replies)
Pages... 99 100 101


$200 Smart Phone!? Ideas..
Created by antaeusa, last reply by antaeusa on 21-May-2013 21:55 (32 replies)
Pages... 2 3


Orcon, Is this for real or a scam??
Created by old3eyes, last reply by mattwnz on 21-May-2013 13:20 (15 replies)

Vodafone Naked Broadband Speeds (Auckland CBD)
Created by wscalioni, last reply by grkiwi on 20-May-2013 21:13 (14 replies)

Ubiquiti Rocket M2 bridged - Does distance/performance drop markedly if units are mounted inside?
Created by clinty, last reply by clinty on 21-May-2013 23:02 (13 replies)


Geekzone Jobs »
Most recent NZ jobs in technology:

Application Support Analyst
Posted 21-May-2013 22:27

SAP Performance Test Lead
Posted 21-May-2013 22:27

Senior MI Analyst
Posted 21-May-2013 19:27

Software Engineer
Posted 21-May-2013 18:27

Senior C#.Net Developer ? 6 Months Fixed Term
Posted 21-May-2013 18:27

Senior Java Developer
Posted 21-May-2013 18:27

Intermediate Technical Analyst
Posted 21-May-2013 18:27


Geekzone Live »
Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.