Saturday, September 22, 2012

Permanently Remove Mystart.Incredibar.com Virus (Mystart Incredibar Redirect Virus Removal Help)



For a few weeks now, we have been receiving an increasing number of emails from our readers asking us how to remove MyStart by IncrediBar search engine and the IncrediBar toolbar. We read all of the mail you send to us. Unfortunately, we are unable to respond to everyone individually.

Instead, we took a closer look at this issue and wrote comprehensive step-by-step removal instructions that apply to all Incredibar toolbars on all major web browsers: Internet Explorer, Mozilla Firefox and Google Chrome.

             


What is Incredibar?


Incredibar is browser toolbar that installs to all of major Internet browsers and redirects random computer systems to mystart.incredibar. com. It badly complicates your activities on the Internet by redirecting your search results and giving you different information that you were actually looking for. It can also add some websites to your bookmark list that you never even thought of adding there. On low memory conditions, it will slow your PC as well. Changing browser settings and redirecting searches classifies Incredibar as browser hijacker.
Incredibar can get inside the system using emails that come with the advertisements. Such emails might be result of cross-promotion using other adware of this company. Once you click on them, Incredibar will be installed on your browser. This type of hijackers can collect all information about your activity and send the information to the marketing companies that later on use this data and display advertisements. However, this way the Incredibar violates your privacy. As compensation, this toolbar allows playing some “free” games, that have advertisements.


If you do a quick Google search for MyStart by IncrediBar you’ll find many forum threads and posts about this toolbar. Surprisingly, most people think that they apparently ended up with the Incredibar MyStart virus, Trojan horse or some sort of malicious software. That’s not quite true. It’s a potentially unwanted application or a browser hijacker at worse if you like but not a virus.

On the other hand, our readers confirmed that this toolbar causes unexpected web browser crashes, takes over the browser, substitutes Incredibar for the home page and http://mystart.incredibar.com for the search engine. Pretty much everything leads to MyStart page. It also redirects search results to their own search engine which is powered by Google (at least that’s what they say) and even displays annoying ads/pop-ups.

McAfee detects Incredibar installer as Heuristic.LooksLike.Win32.Suspicious.B. TrendMicro detects it as TROJ_ENCPK_0000009.TOMA and finally ESET also sees it as a threat Win32/ImInstaller potentially unwanted application.


             



Some behavior-based antivirus programs block MyStart by IncrediBar too. So, even thought, it’s not a virus there’s definitely something wrong with this toolbar.

IncrediBar toolbar can be uninstalled just by going to Control Panel and selecting Add/Remove Programs. But for some reasons, the folks at Perion forgot to mention that there’s also an application called Web Assistant. It must be uninstalled as well (see the removal instructions below). So, removing IncrediBar toolbar is not a big deal. But it’s a completely different story when it comes to MyStart by IncrediBar search page.




MyStart by IncrediBar Toolbar Removal Instructions:




1. Go to the Start Menu. Select Control Panel → Add/Remove Programs.
If you are using Windows Vista or Windows 7, select Control Panel → Uninstall a Program.

                              



2. Search for IncrediBar* toolbar and Web Assistant in the list. Select the program and click Remove button. Remove both components!
If you are using Windows Vista/7, click Uninstall up near the top of that window.



    



Remove MyStart by IncrediBar in Internet Explorer:


1. Open Internet Explorer. Go to Tools → Manage Add-ons.

                       



2. Select Search Providers. First of all, choose Bing or Live Search search engine and make it your default web search provider (Set as default).

                   



3. Remove MyStart Search and Incredibar Customized Web Search web search providers. Close the window.

        



4. Go to Tools → Internet Options. Select General tab and click Use default button or enter your own website, e.g. google.com instead of http://mystart.incredibar.com. Click OK to save the changes. And that's about it for Internet Explorer.

                      




Remove MyStart by IncrediBar in Mozilla Firefox:


1. Open Mozilla Firefox. Go to Tools → Add-ons.

             




2. Select Extensions. Remove IncrediBar* toolbar. Close the window.

           



3. Click on the magnifying glass search icon as shown in the image below and select Manage Search Engines....


                               



4. Choose MyStart Search from the list and click Remove to remove it. Click OK to save changes.

                





4. Choose MyStart Search from the list and click Remove to remove it. Click OK to save changes. 5. Go to Tools → Options. Under the General tab reset the startup homepage or change it to google.com, etc.

               




6. In the URL address bar, type about:config and hit Enter.


                 

Click I'll be careful, I promise! to continue.


                       




In the filter at the top, type: mystart

             



And that's it for Mozilla Firefox!


Associated MyStart by IncrediBar files and Registry values:

Files:

    C:\Program Files\Incredibar-Games_EN\GottenAppsContextMenu.xml
    C:\Program Files\Incredibar-Games_EN\Incredibar-Games_ENToolbarHelper.exe
    C:\Program Files\Incredibar-Games_EN\ldrtbIncr.dll
    C:\Program Files\Incredibar-Games_EN\OtherAppsContextMenu.xml
    C:\Program Files\Incredibar-Games_EN\prxtbIncr.dll
    C:\Program Files\Incredibar-Games_EN\SharedAppsContextMenu.xml
    C:\Program Files\Incredibar-Games_EN\tbIncr.dll
    C:\Program Files\Incredibar-Games_EN\toolbar.cfg
    C:\Program Files\Incredibar-Games_EN\ToolbarContextMenu.xml
    C:\Program Files\Incredibar-Games_EN\uninstall.exe

Registry values:

    HKEY_CURRENT_USER\Software\Conduit\RevertSettings "http://mystart.Incredibar.com?a=1ex6GUYANIc&i=38"
    HKEY_CURRENT_USER\Software\IM\38 "PPD"
    HKEY_CURRENT_USER\Software\ImInstaller\Incredibar
    HKEY_CURRENT_USER\Software\Incredibar
    HKEY_CURRENT_USER\Software\Incredibar-Games_EN
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main StartPage "http://mystart.Incredibar.com?a=1ex6GUYANIc&i=38"
    HKEY_LOCAL_MACHINE\SOFTWARE\Conduit\Toolbars "Incredibar-Games EN Toolbar"
    HKEY_LOCAL_MACHINE\SOFTWARE\Incredibar-Games_EN\toolbar
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar "Incredibar-Games EN Toolbar"
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Incredibar-Games EN Toolbar
 

If you like this post then kindly Share with your friends and groups and hit like on InvisibleHackers Official or

Connect With us on Facebook.
Thank You For Visiting.....

Written by

Hello, My name is Ankit Bhandari You can visit and Learn Ethical Hacking from my blog. But all these hacking tricks only for educational purpose. Me and My Blog will not responsible for any wrong use of this. Enjoy it but never miss use it.

0 comments:

Post a Comment

 

© 2014 Invisible Hackers. All rights Reserved. Designed by InvisibleHackers