How to Get Rid of MyStart Incredibar Trojan

Forums › Microsoft Windows › How to Get Rid of MyStart Incredibar Trojan

eracode

Smpl Mnmlst
8856 posts

Uber Geek

ID Verified

Trusted

Subscriber

#95865 15-Jan-2012 09:00

I have somehow ended up with an apparent virus/trojan thing called MyStart Incredibar. This takes over the browser and substitutes Incredibar for your home page.

Uninstalled it using Revo Uninstaller but that did not get rid of the problem. I have run Malwarebytes, my ESET NOD32, SpyBot etc and although some of these came up with a few bits to be cleaned, it didn't fix the problem.

I have also googled quite extensively looking for a fix and although there's a lot of traffic on the subject, nothing I can see that seems to be legit or make sense.

Does anyone know anything about this or can suggest what I should do? Thanks.

Sometimes I just sit and think. Other times I just sit.

gregmcc

2147 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#569003 15-Jan-2012 09:18

It's part of incredimail.

this program has a bad habbit of installing a few other annoying programs....ad ware etc.

freitasm

BDFL - Memuneh
79281 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#569005 15-Jan-2012 09:24

Try Microsoft Safety Scanner.

UrbanMyth

122 posts

Master Geek

#569009 15-Jan-2012 09:54

Have you tried superAntispyware? http://www.superantispyware.com/

I find this better than Malwarebytes MOST times.

Otherwise you may have to do a manual removal

nakedmolerat

4629 posts

Uber Geek

Trusted

Lifetime subscriber

#569011 15-Jan-2012 10:00

Incredibar!!! hahaha (love the name)

follow the manual removal (Mystart.incredibar.com Manual Removal Guide)

i found it easier to deal with it manually

eracode

Smpl Mnmlst
8856 posts

Uber Geek

ID Verified

Trusted

Subscriber

#569101 15-Jan-2012 14:21

Thanks to those who offered suggestions. Neither Windows Security Essentials nor SuperAntiSpyWare detected it.

nakedmolerat: Incredibar!!! hahaha (love the name)

follow the manual removal (Mystart.incredibar.com Manual Removal Guide)

i found it easier to deal with it manually

@nmr: Did you actually have the infection and get rid of it using the manual method you refer to above?

Sometimes I just sit and think. Other times I just sit.

gzt

17127 posts

Uber Geek

Lifetime subscriber

#570618 18-Jan-2012 21:55

They advertise that all major scanners find it is spyware free:

http://www.incredimail.com/english/incredimail/safe-and-free-incredimail-download.aspx

I find SpyBot useful when nothing else is on hand. Note, it is also on the list above.

eracode

Smpl Mnmlst
8856 posts

Uber Geek

ID Verified

Trusted

Subscriber

#570688 19-Jan-2012 09:05

gzt: They advertise that all major scanners find it is spyware free:

http://www.incredimail.com/english/incredimail/safe-and-free-incredimail-download.aspx

I find SpyBot useful when nothing else is on hand. Note, it is also on the list above.

Thanks gzt. Maybe it's not as bad and invidious as I originally suspected it was, even though there's a lot of traffic on the interwebs asking how to get rid of it.

I ran all sorts of scans (including SpyBot) and nothing detected it. At the outset it took over my homepage and I thought it was stopping me from changing the homepage back to what I wanted - but I was wrong about that. So now it's still there on my PC but not visible or obvious and I am just living with it.

Sometimes I just sit and think. Other times I just sit.

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

gzt

17127 posts

Uber Geek

Lifetime subscriber

#570694 19-Jan-2012 09:25

Maybe that makes it more insidious... ; ).

I uninstalled it for a friend recently. Removing Incredimail from programs and features in control panel did the trick, maybe that was just luck.

mxpress

376 posts

Ultimate Geek

#570702 19-Jan-2012 09:51

eracode: I have somehow ended up with an apparent virus/trojan thing called MyStart Incredibar. This takes over the browser and substitutes Incredibar for your home page.

Does anyone know anything about this or can suggest what I should do? Thanks.

Run Malwarebytes in windows "safe mode" I find it works for me everytime and I have fixed many instances of this blasted thing in customer's computers this way.

mxpress

376 posts

Ultimate Geek

#570726 19-Jan-2012 11:08

mxpress:
eracode: I have somehow ended up with an apparent virus/trojan thing called MyStart Incredibar. This takes over the browser and substitutes Incredibar for your home page.

Does anyone know anything about this or can suggest what I should do? Thanks.

Run Malwarebytes in windows "safe mode" I find it works for me everytime and I have fixed many instances of this blasted thing in customer's computers this way.

Ohh, after that, also run Spybot in safe mode as well. Your system should then be clear

mxpress

listudio

196 posts

Master Geek

#570793 19-Jan-2012 13:07

A few years ago my browser hacked by a malware called 'ms4000'. It seemed that none of the anti-malware programs could fix the problems. Finally got it fixed just simply changing some settings on System Configuration : on Start Up & Services menus I unchecked some unknown or suspicious programs, tested each of them one by one, finally rid myself of the problem.

eracode

Smpl Mnmlst
8856 posts

Uber Geek

ID Verified

Trusted

Subscriber

#570828 19-Jan-2012 14:04

mxpress:
mxpress:
eracode: I have somehow ended up with an apparent virus/trojan thing called MyStart Incredibar. This takes over the browser and substitutes Incredibar for your home page.

Does anyone know anything about this or can suggest what I should do? Thanks.

Run Malwarebytes in windows "safe mode" I find it works for me everytime and I have fixed many instances of this blasted thing in customer's computers this way.

Ohh, after that, also run Spybot in safe mode as well. Your system should then be clear

Thanks - have now done all that. The scans did not show anything and isn't showing in the apps list in Control Panel. Actually no evidence of it at all. I am thinking that maybe the detailed uninstall I did with Revo Uninstaller prior to OP had got rid of it but I was unaware of that. Sorry if this has been a storm in teacup.

Sometimes I just sit and think. Other times I just sit.