How dangerous is the MyStart Incredibar infection? Are my stored passwords secure?
I have tried all the instructions for removing the MyStart/ Incredibar infection I can find. I've gone through my registry and set to default or deleted every instance of Babylon, Web Assistant, Mystart and Ibar that came up on the search feature. Went into about:config and followed the forum's instruction. It seems gone from IE and Chrome but the about:config portions I was instructed to change revert back as soon as I reboot. There are what looks like 60+ extension references to the infection but I can't seem to delete those only set them to default which seems like time wasted since they were created my Ibar to begin with.
I obviously want to get rid of it but right now I am more concerned that it might have compromised my passwords in some way. If it's slick enough that Modzilla can't seem to figure out how to get rid of it, it may be slick enough to steal the passwords. Unfortunatly I have not been using a Master Password.
One more symptom, with all my tinkering with the registry and about:config, I can't make the Ibar option to stay out of my toolbar list.
All Replies (10)
I can't make the Ibar option to stay out of my toolbar list
You might still have it installed. Check here, and just disable anything that is not essential:
orange Firefox button or classic Tools menu > Add-ons > Extensions category
Then restart Firefox and see whether it is gone from the Toolbars list.
I followed all the steps from deletemalware and had already removed the extension and it renamed gone. It's still reappearing in my about:config.
If I fresh install but save my bookmarks and passwords will that purge this scourge?
Also if you know, please tell me if my password information could have been compromised. If so I need to call my bank and other financial sites and report the infection and change all my passwords.
I'm not aware of whether Incredibar does anything other than divert searches.
As a partial fresh start, you could try the new Reset feature. This duplicates certain key data from your active settings folder into a new one, bypassing some add-ons and custom settings. Your plugins will still be active, but could be disabled manually if you like.
More information in this article: Refresh Firefox - reset add-ons and settings.
If the new settings folder has the same problem, you can switch back if you like using Firefox's Profile Manager. (This article describes how to start Firefox in the profile manager. I do not recommend removing anything until you are 110% certain that you will never need any of that profile's data in the future. Profile Manager - Create, remove or switch Firefox profiles)
Does it make any difference?
After resetting.. my open new tabs aren't being redirected.. Mystart is not listed in about:config, and there is no I-bar option with the toolbars. There is a Babylon search engine option however. I'll weed wack it and get back to you if anything 'odd' starts again.
Sounds scary to try to get into profiles. I sure wish I had never gotten this demon installed onto my computer. I stopped using Firefox because I was thinking that if I started using another browser I might be able to bypass the problems this uninvited "guest" may cause. I'm hoping so anyway.
A great big THANKS to everyone whom took the time and diligence to type and post such detailed solutions and ideas in this forum. THANKS!!!
Modified by JD.Straw
Hi JD.Straw, I see from your other post that you are using the Pale Moon browser, which is a custom build of Firefox. I'll be curious to hear whether the malware continues to ignore Pale Moon, despite its close similarity to Firefox. Fingers crossed.
Hello and thanks for your diligence. Since going to Pale Moon, I have had no problems. I was aware that it was a "knock-off" (so to speak) of Mozilla's Firefox. I just happen to PREFER Firefox and seeing how closely Pale Moon "followed the tracks" of Firefox, I decided to download it, and after using it I have kicked FireFox to the curb, and made Pale Moon my default browser. I am VERY happy with Pale Moon and have had no further issues with the demon toolbar aforementioned in my other posts. Thank you again for your follow up, your suggestions, your instructions, your patience, and the knowledge that you so faithfully and freely share with us less knowledgeable users. God Bless!
Theres many variations of Incredibar, try http://www.bybe.net/blog/removing-mystart-incredibar-search-from-firefox.html and see how you get on, the administrators their actually answer quickly which is nice.
I have also been infected by this add-on. While trying to remove incredibar, I have use this guide: http://www.2-spyware.com/remove-incredibar.html Pay attention that you should uninstall not only MyStart Incredibar, but such programs as Games EN Toolbar API Server, Incredibar Music Toolbar, Incrediba Helper Object, Web Assistant, Babylon Toolbar and similar. Additionally, you should change your homepage and the default start engine settings back to normal...