Here at ByBe we find unexpected installs of extensions and settings very annoying, these vary from a installing a toolbar, new home page or even changing your default search engine. A lot of the times people will find themselves with these bars and other undesired settings without actually being asked or being fooled somehow by an installer by not making it very clear what system changes will occur, upon install.
Lucky enough Browsers really have come a long way since they were first introduced; nowadays browsers come with configuration pages which allow users to remove extensions and settings very easily with just a few clicks of the mouse, no more need for applications like hijackthis for simple de-installing of bars and other miscellaneous settings.
This blog entry will demonstrate how simple it is to remove the MyStart Incredibar search setting and the homepage by using the ‘about:config’ within firefox.
MyStart Incredibar Removal Process
Open your Firefox browser and click the address bar and type in ‘about:config’ and press enter, you will then be greeted with this page.
Before you click ‘I’ll be careful, I promise!’ It’s important to understand that you can really mess up your browser by changing things without knowing the full extent what they do. Only change values and settings that are required and mentioned in this guide.
OK Great, you clicked the ‘I’ll be careful, I promise!’ button, you will now notice a new screen with lots of settings and values, simply filter your results by clicking the filter field and entering ‘mystart’ you should then get results like so:
Once you have filtered your results you can now proceed to removing MyStart Incredibar from your firefox, first start by double clicking ‘browser.search.defaultenginename’ and change this value to ‘Google’, this will make Google your default search engine with no branding, now It’s time to remove the mystart incredibar homepage. To do this simply double click ‘browser.startup.homepage’ and change to the page you wish to have popup every time you load your browser, in this example we use Google ‘http://www.google.co.uk’. Here is an image to show you what your filter and settings should look like once changed.
Now restart firefox and welcome back your old settings, enjoy.
Failed Removals (Advanced Only)
From the recent blog posts we have had it seems some people are experiencing problems removing this nasty toolbar, now there could be a feel reasons why such as the user reading this site is not following the instructions correctly to remove mystart.incredibar or they have a new variation of the malware that is harder to remove. Here is the advanced method of removing mystart.incredibar toolbar (Please note this for the insanely advanced users only, and no way is ByBe liable for you breaking your windows further by a result of anything mentioned on this page:
Step 1: Backup your System
Do a system restore backup, just in case something goes tits up.
Step 2: Background Processes
You may have a mystart.incredibar process running, right click your windows start bar and click task manager, look for a svchost process that looks suspect. Will look normally like asadasd.exe, or something which generally doesn’t look like a genuine windows process, always use Google or Bing search to your advantage as these will tell you if there genuine or not, if they aren’t found on a search engine they basically are fake/malware processes.
If you find such a process, end the process by right clicking it and ending process tree.
Step 3: Nasty Files
You may have nasty files lurking on your pc that are associated with incredibar, look in these locations:
- %Windows%\system32\DRIVERS\(random string).sys
- %Windows%\system32\fake dlls.dll
- %Windows%\system32\fake svchost.exe
- %AppData%\(random string).exe
- %Temp%\(random string).class (JUST REMOVE ALL FROM TEMP)
- %Program Files%\Incredibar\Incredibar.exe
- %UserProfile%\Start Menu\Incredibar\Incredibar.lnk
- %UserProfile%\Start Menu\Incredibar\Help.lnk
- %UserProfile%\Start Menu\Incredibar\Registration.lnk
- %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Incredibar.lnk
- C:\Program Files\incredibar.dll (ensure you do a regsvr32 /u dllname.exe)
Remove always be careful what you delete, and always ensure that you either use the shift key to perm remove or empty your recycle bin afterwards.
Step 4: Registry Entries
Mystart Incredibar seems to have many variations and the registry entries do change, in some variations you don’t even need to remove the entries why others you may,
Look at the following entries:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “13376694984709702142491016734454?