How to Get Rid of MyStart Incredibar Trojan

Forums › Microsoft Windows › How to Get Rid of MyStart Incredibar Trojan

eracode

2292 posts

Uber Geek
+1 received by user: 525

Subscriber

Topic # 95865 15-Jan-2012 09:00

I have somehow ended up with an apparent virus/trojan thing called MyStart Incredibar. This takes over the browser and substitutes Incredibar for your home page.

Uninstalled it using Revo Uninstaller but that did not get rid of the problem. I have run Malwarebytes, my ESET NOD32, SpyBot etc and although some of these came up with a few bits to be cleaned, it didn't fix the problem.

I have also googled quite extensively looking for a fix and although there's a lot of traffic on the subject, nothing I can see that seems to be legit or make sense.

Does anyone know anything about this or can suggest what I should do? Thanks.

gregmcc

1433 posts

Uber Geek
+1 received by user: 255

Subscriber

Reply # 569003 15-Jan-2012 09:18

It's part of incredimail.

this program has a bad habbit of installing a few other annoying programs....ad ware etc.

freitasm

BDFL - Memuneh
58928 posts

Uber Geek
+1 received by user: 10298

Administrator

Trusted

Geekzone

Subscriber

Reply # 569005 15-Jan-2012 09:24

Try Microsoft Safety Scanner.

Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | Backblaze cloud backup (personal and business) | My technology disclosure

UrbanMyth

114 posts

Master Geek
+1 received by user: 2

Reply # 569009 15-Jan-2012 09:54

Have you tried superAntispyware? http://www.superantispyware.com/

I find this better than Malwarebytes MOST times.

Otherwise you may have to do a manual removal

nakedmolerat

4332 posts

Uber Geek
+1 received by user: 805

Trusted

Reply # 569011 15-Jan-2012 10:00

Incredibar!!! hahaha (love the name)

follow the manual removal (Mystart.incredibar.com Manual Removal Guide)

i found it easier to deal with it manually

eracode

2292 posts

Uber Geek
+1 received by user: 525

Subscriber

Reply # 569101 15-Jan-2012 14:21

Thanks to those who offered suggestions. Neither Windows Security Essentials nor SuperAntiSpyWare detected it.

nakedmolerat: Incredibar!!! hahaha (love the name)

follow the manual removal (Mystart.incredibar.com Manual Removal Guide)

i found it easier to deal with it manually

@nmr: Did you actually have the infection and get rid of it using the manual method you refer to above?

gzt

9072 posts

Uber Geek
+1 received by user: 1245

Reply # 570618 18-Jan-2012 21:55

They advertise that all major scanners find it is spyware free:

http://www.incredimail.com/english/incredimail/safe-and-free-incredimail-download.aspx

I find SpyBot useful when nothing else is on hand. Note, it is also on the list above.

eracode

2292 posts

Uber Geek
+1 received by user: 525

Subscriber

Reply # 570688 19-Jan-2012 09:05

gzt: They advertise that all major scanners find it is spyware free:

http://www.incredimail.com/english/incredimail/safe-and-free-incredimail-download.aspx

I find SpyBot useful when nothing else is on hand. Note, it is also on the list above.

Thanks gzt. Maybe it's not as bad and invidious as I originally suspected it was, even though there's a lot of traffic on the interwebs asking how to get rid of it.

I ran all sorts of scans (including SpyBot) and nothing detected it. At the outset it took over my homepage and I thought it was stopping me from changing the homepage back to what I wanted - but I was wrong about that. So now it's still there on my PC but not visible or obvious and I am just living with it.

gzt

9072 posts

Uber Geek
+1 received by user: 1245

Reply # 570694 19-Jan-2012 09:25

Maybe that makes it more insidious... ; ).

I uninstalled it for a friend recently. Removing Incredimail from programs and features in control panel did the trick, maybe that was just luck.

mxpress

362 posts

Ultimate Geek
+1 received by user: 13

Reply # 570702 19-Jan-2012 09:51

eracode: I have somehow ended up with an apparent virus/trojan thing called MyStart Incredibar. This takes over the browser and substitutes Incredibar for your home page.

Does anyone know anything about this or can suggest what I should do? Thanks.

Run Malwarebytes in windows "safe mode" I find it works for me everytime and I have fixed many instances of this blasted thing in customer's computers this way.

mxpress

362 posts

Ultimate Geek
+1 received by user: 13

Reply # 570726 19-Jan-2012 11:08

mxpress:
eracode: I have somehow ended up with an apparent virus/trojan thing called MyStart Incredibar. This takes over the browser and substitutes Incredibar for your home page.

Does anyone know anything about this or can suggest what I should do? Thanks.

Run Malwarebytes in windows "safe mode" I find it works for me everytime and I have fixed many instances of this blasted thing in customer's computers this way.

Ohh, after that, also run Spybot in safe mode as well. Your system should then be clear

mxpress

listudio

196 posts

Master Geek

Reply # 570793 19-Jan-2012 13:07

A few years ago my browser hacked by a malware called 'ms4000'. It seemed that none of the anti-malware programs could fix the problems. Finally got it fixed just simply changing some settings on System Configuration : on Start Up & Services menus I unchecked some unknown or suspicious programs, tested each of them one by one, finally rid myself of the problem.

eracode

2292 posts

Uber Geek
+1 received by user: 525

Subscriber

Reply # 570828 19-Jan-2012 14:04

mxpress:
mxpress:
eracode: I have somehow ended up with an apparent virus/trojan thing called MyStart Incredibar. This takes over the browser and substitutes Incredibar for your home page.

Does anyone know anything about this or can suggest what I should do? Thanks.

Run Malwarebytes in windows "safe mode" I find it works for me everytime and I have fixed many instances of this blasted thing in customer's computers this way.

Ohh, after that, also run Spybot in safe mode as well. Your system should then be clear

Thanks - have now done all that. The scans did not show anything and isn't showing in the apps list in Control Panel. Actually no evidence of it at all. I am thinking that maybe the detailed uninstall I did with Revo Uninstaller prior to OP had got rid of it but I was unaware of that. Sorry if this has been a storm in teacup.