This document provides instructions for removing various types of spyware and toolbars from a computer, including Incredibar, Babylon Toolbar, FBI Virus, and Infostealer. It recommends scanning the computer with SpyDoctor software available from a provided link to ensure all threats are removed. The instructions cover modifying registry settings and deleting specific files from the Windows system directory. It concludes by providing a link for additional information on spyware and malware removal.
2. GOOGLE REDIRECT
VIRUS FIX!
1. Open C:WindowsSystem32Driversetchosts with
Notepad, and check that it contains only:
127.0.0.1 localhost
If you see any other IP or host entries – delete them!
2. Check browser proxy, disable if it is of unknown origin;
3. Check your DNS server settings;
4. Check IE Addons: Tools -> Manage Addons
5. If this fails – scan your PC with SpyDoctor:
http://unspyme.com/sddownload.php
3. REMOVE INCREDIBAR
Removal instructions depend on browser you use:
Google Chrome:
1. Use "Customize and control Google Chrome" icon -> Tools ->
Extensions, Select and REMOVE: “Incredibar Toolbar”, Games EN
Toolbar API Server, Incredibar Music Toolbar, Incredibar.com Helper
Object, Web Assistant et all.
2. Go to Settings->Manage search engine, Select "Google" or
"Bing", then REMOVE: "MyStart Search".
3. Go to Settings -> Appearance -> Show Home, CHANGE your
homepage.
• Scan your computer for additional threats with SpyDoctor:
http://unspyme.com/sddownload.php
4. REMOVE INCREDIBAR
Internet Explorer:
1. Go to "Tools"->"Manage Add-ons"->"Search
Providers", select "Bing", then REMOVE: "Incredibar
Toolbar", MyStart Search, Incredibar Search, Games EN Toolbar
API Server, Incredibar Music Toolbar, Incredibar.com Helper
Object, Web Assistant et all.
2. Go to "Tools"->"Internet Options"->"General"
tab, CHANGE: "mystart.incredibar.com" to your homepage like
"google.com".
Scan your computer for additional threats with SpyDoctor:
http://unspyme.com/sddownload.php
5. REMOVE INCREDIBAR
Mozilla Firefox:
1. Go to "Tools"->"Add-ons"->"Extensions", REMOVE: IncrediBar
toolbar et all. Close Firefox.
2. Start Mozilla Firefox, Click the magnifying glass -> Manage
Search Engines…, REMOVE: "MyStart by Incredibar", Games EN
Toolbar API Server, Incredibar Music Toolbar, Incredibar.com Helper
Object, Web Assistant et all. Click "OK" to save changes.
3. Go to "Tools” -> "Options” -> "General", CHANGE: homepage
to your homepage like "google.com".
4. Type in address bar: about:config and press "Enter", Click "I'll
be careful, I promise!", Type "mystart" in the search field.
"Reset" all of them to default.
• Scan your computer for additional threats with SpyDoctor:
http://unspyme.com/sddownload.php
6. BABYLON TOOLBAR
REMOVAL
1. Go to your "Control Panel” / "Uninstall a Program" ->
"Add/Remove Programs” / "Programs and Features'.
REMOVE/UNINSTALL: "Babylon Toolbar" et al.
Follow instructions by your browser:
Internet Explorer:
Go to "Tools" -> "Manage Add-ons" DISABLE: "Babylon
Toolbar", Babylon toolbar helper, Babylon IE
plugin, babylonToolbar.com et all.
Mozilla Firefox:
Go to "Tools" -> "Manage Add-ons" DISABLE: "Babylon
Toolbar", Babylon toolbar helper, Babylon IE
plugin, babylonToolbar.com et all.
Google Chrome:
Click on the Wrench icon -> "Tools" -> "Extensions". TRASH:
"Babylon Translator".
7. FBI VIRUS REMOVAL
1. Use another PC to download SpyDoctor:
http://unspyme.com/sddownload.php
2. Copy install to USB key;
3. Reboot infected PC to Safe-Mode (Holding “F8” key while
booting);
4. Scan for virus;
You can also do this without SpyDoctor (but be diligent):
1. Reboot PC to Safe-Mode;
2. Run regedit
3. Find any Startup Entries in:
HK*SoftwareMicrosoftWindowsCurrentVersionRun
4. Write them down(to remove from filesystem) and Change
their values to explorer.exe
8. REMOVE
INFOSTEALER
Threat is also known as “Infostealer.Nasdosto”.
1. Open Explorer, Go to: C:WINDOWSsystem32
2. Remove the following files:
“ns2dos.exe”, “ns6dos.exe”, “ns7dos.exe”, “nsdos2.exe”
3. Run regedit
4. Go to:
HK*SoftwareMicrosoftWindowsCurrentVersionRun:
Remove startup entries:
“nsdos-debugg”, “nsdos-debug2”, et al.
5. If this fails or you want to check for additional spyware,
Download SpyDoctor: http://unspyme.com/sddownload.php
9. HAPPY END!
I hope you have a clean PC now!
More information and questions regarding spyware &
malware removal:
http://www.unspyme.com/
Thank you,
Andy