Member Avatar for tez

My home page has been hijacked by Incredifind and often when I am searching in Google this Incredifind pops up again. I have run Adaware and Spybot but it's still there. Any help would be appreciated.
Tez

  • 3 Contributors
  • 3 Replies
  • 112 Views
  • 6 Days Discussion Span
  • Latest Post Latest Post by tez

Dani AI

Generated

reported the classic IncrediFind behavior: homepage changed and search results redirected. correctly pointed out collecting a diagnostic log can help find the culprit, and linked a removal guide that says fixed the immediate problem. The steps below focus on verifying the infection is truly gone, cleaning common leftovers, and preventing a recurrence.

Quick verification and cleanup

  • Check any browser shortcuts: right-click the shortcut, Properties -> Target, and remove any URL text after the executable path (for example, anything appended after iexplore.exe or firefox.exe).
  • Reset the browser or create a fresh profile to remove injected home/search settings.
  • Verify proxy settings (Internet Options -> Connections -> LAN settings) and clear any unauthorized proxy.
  • Inspect the hosts file at C:\Windows\System32\drivers\etc\hosts (open Notepad as admin) and remove suspicious redirects.
  • Use a startup/BHO inspector (Autoruns or similar) to disable unfamiliar browser helper objects and persistent startup items; disable first, then delete once confirmed malicious.

Manual cleanup and safety notes

  • Search the registry and disk for the string "incredifind" and remove entries only after exporting the key (backup the registry) and creating a System Restore point. Mistakes here can break the system.
  • If the hijack persists after automated scans and the steps above, collect logs (Autoruns or the scan tool output) and post them in the Security forum so experienced members can review—include exact symptoms and what you already tried.
  • As a last resort, back up personal files and do a clean OS install if removal is unreliable.

Prevention
Keep the OS and browsers updated, use a current anti-malware scanner for a full system scan, and change passwords that were used while the machine was infected.

Recommended Answers

All 3 Replies

Member Avatar for crunchie

Download HijackThis from & unzip it into it's own, permanent folder, (Not a temporary folder or the desktop (in a folder on the desktop is fine) & not directly on your hard drive). If you prefer an executable file, then download from
If you have anything disabled in MsConfig, please re-enable it/them.
Start HJT & press the scan button. When the scan is finished the scan button will change to save. Save the log to a text file, copy the entire contents of the text file & paste it into the body of your post. DO NOT FIX ANYTHING YET. Most of what is there is necessary for the running of your system.

Please post it in the Security forum.

Member Avatar for mnbrsslr34

My home page has been hijacked by Incredifind and often when I am searching in Google this Incredifind pops up again. I have run Adaware and Spybot but it's still there. Any help would be appreciated.
Tez

Hi, found this on Incredifinder, this will help you to remove it, I hope it works!
http://www.2-spyware.com/remove-incredifind.html
Monica

Member Avatar for tez

Thanks for your help Monica and Crunchie. The download you suggested Monica was simple to use and seems to have done the trick too! -- so far!
Tez

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.