Mystart Incredibar - need help removing

Viruses and worms
1

Someone posted about this a few weeks ago and Essexboy offered to help but the poster didn’t follow through and post the log he requested, so I’m asking this fresh.

This “painware” as Essexboy calls it, has installed itself into IE8 and Firefox 12.0. I’m running WindowsXP. It’s listed under “add ons” in Firefox but when I clicked remove under tools/options/addons and rebooted, it has still taken over as my home page and default search engine in both browsers. I did NOT click to agree to install it when it first appeared as a pop-up.

Help, please?

2

Hi Jet

I found this

http://help.incredimail.com/incredimail/help_center/help_article.aspx?article_id=276&lang_id=9

Please can you visit the following page:

http://forum.avast.com/index.php?topic=53253.0

and post the scan results from

OTL
Malwarebytes
AswMBR

This helps the malware specialist to help you :slight_smile:

3

Heres the Malwarebytes log:

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.06.28.13

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
New User :: USER-D671AD83D2 [administrator]

6/28/2012 7:47:31 PM
mbam-log-2012-06-28 (19-47-31).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 219199
Time elapsed: 40 minute(s), 14 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

4

Monitoring… :slight_smile:

5

Just ran Avast AV and no malicious items detected. It was easy enough to change the home page back to my default and the search engine back to Google, but its still on my system. Need more time to read some of the links, will have to get to them tomorrow, thanks for everyone’s help so far…

6

Ok sounds good.