Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

My start by incredbar


  • This topic is locked This topic is locked
8 replies to this topic

#1 cheryl g

cheryl g

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:09:37 AM

Posted 16 July 2012 - 02:21 PM

Hello,

I have an unwanted search engine of sorts. My start by incredibar. I tried to ininstall using add and remove programs. I ran a malware bytes scan and removed several items recomended. I used Revo uninstaller. I reset my IE home page back to normal. (It had changed my homepage.) It no longer comes up on IE when I search for something. It does still come up on Google when I do a search.

I am running Windows XP professional with service pack 3.

Thanks, Cheryl

BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

    Almost Retired


  • Members
  • 9,515 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:12:37 AM

Posted 16 July 2012 - 03:09 PM

Hi -
One older and simple program that usually removes this is Spybot Search&Destroy << Download -
Download and install the program, check for Updates and run a scan (Check for problems) - I normally get 100% results with this -
When the scan is finished just click the ( + ) beside any found items and select repair -
Also install SuperantiSpyware Free, Install , Update, and run a quick scan to check for any left-overs -

Good Luck -

#3 cheryl g

cheryl g
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:09:37 AM

Posted 23 July 2012 - 02:08 PM

Thanks for the suggestions. I did use both of those programs, and still have the incredibar.

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 61,590 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:10:37 AM

Posted 23 July 2012 - 02:27 PM

It mau also be in your browser's Add ons.. If you don't know tell us your browswer and we'll tell you how to look.

It may also be gone after ruunning this
Next run MBAM (MalwareBytes):

Please download Malwarebytes Anti-Malware Posted Image and save it to your desktop.
  • Important!! When you save the mbam-setup file, rename it to something random (such as 123abc.exe) before beginning the download.
Malwarebytes may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.

  • Make sure you are connected to the Internet and double-click on the renamed file to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • Malwarebytes will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself. Press the OK button and continue.
  • If you cannot update Malwarebytes or use the Internet to download any files to the infected computer, manually update the database by following the instructions in FAQ Section A: 4. Issues.
  • Under the Scanner tab, make sure the "Perform Quick Scan" option is selected.
  • Click on the Scan button.
  • When finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box, then click the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked and then click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows the database version and your operating system.
  • Exit Malwarebytes when done.
Note: If Malwarebytes encounters a file that is difficult to remove, you will be asked to reboot your computer so it can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally will prevent Malwarebytes from removing all the malware.

-- Some types of malware will target Malwarebytes and other security tools to keep them from running properly. If that's the case, go to Start > All Programs > Malwarebytes Anti-Malware folder > Tools > click on Malwarebytes Chameleon and follow the onscreen instructions. The Chameleon folder can be accessed by opening the program folder for Malwarebytes Anti-Malware (normally C:\Program Files\Malwarebytes' Anti-Malware or C:\Program Files (x86)\Malwarebytes' Anti-Malware).
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook Have you seen..Select Real Security

#5 cheryl g

cheryl g
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:09:37 AM

Posted 30 July 2012 - 01:20 PM

I use Chrome for a browser. I looked for addons and did not see any. It shows 2 extensions, but not incredibar.
My husband uses Internet Explorer. It was appearing there awhile ago, but no longer. I think it left IE when I deleted it from the add and remove program menu.

Here is the MBAM log:


Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Database version: v2012.07.29.09

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Administrator :: 170L [administrator]

7/29/2012 9:03:17 PM
mbam-log-2012-07-29 (21-03-17).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 185401
Time elapsed: 11 minute(s), 8 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\Documents and Settings\All Users\Application Data\CodecUpdate\ix_updater.exe (Trojan.Dropper.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\AS6H61NL\updater[1].exe (Trojan.Dropper.H) -> Quarantined and deleted successfully.

(end)

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 61,590 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:10:37 AM

Posted 30 July 2012 - 07:33 PM

Can you do a System Restore to a date prior to this happening?

Windows XP System Restore Guide

is it gone now?
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook Have you seen..Select Real Security

#7 cheryl g

cheryl g
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:09:37 AM

Posted 31 July 2012 - 08:29 PM

System restore says I can't restore to the earlier date because "no changes have been made to your computer"

#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 61,590 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:10:37 AM

Posted 01 August 2012 - 02:25 PM

If Incredibar is still an issue then we will need a deeper look.

Please go here....Preparation Guide ,do steps 6-9.

Create a DDS log and post it in the new topic explained in step 9 which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.
If GMER won't run (it may not on a 64 bit system) skip it and move on.

Let me know if that went well.
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook Have you seen..Select Real Security

#9 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 33,264 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:10:37 AM

Posted 07 August 2012 - 08:06 AM

Hello,

Now that you have posted a log here: http://www.bleepingcomputer.com/forums/topic464207.html you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a MRT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the MRT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the MRT Team members are EXTREMELY busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the MRT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRT Team member is already assisting you and not open the thread to respond.

Please be patient. It may take several days to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

To avoid confusion, I am closing this topic. Good luck with your log.

Orange Blossom :cherry:

Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SuperAntiSpyware, SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users