See this Google search for help. Too damn many circular discussions about what works and what doesn't.

Basically, you need to figure out what was installed on that PC which still remains, and is resetting those prefs in Firefox - probably resetting them every time you launch Firefox. You need to get rid of it completely.

razakm, I have a idea that there is a file called user.js in your Firefox folder. If you can delete this file, I believe the entries (or preferences as we call them) will stop coming back after you reset them.

To find the user.js file:
Go to Firefox button > Help > Troubleshooting Information then click on the Show Folder button.

Once the window for the profile folder opens, close Firefox. Then look for a file named user.js in that folder and delete it. Open Firefox again & check to see if the entries are there. If they are, right-click and Reset them again. Now restart Firefox and see if the problem stays gone.

If you could do me a favor though, before deleting user.js. Could you make a copy of it to your desktop & email it to me @ mozsupport@gmail.com ? I want to see how many entries it is making & see if it is doing anything else bad. Thanks.

For other people who need step by step help to find these settings:
Noah_Sumo's detailed step by step instructions on removing leftover Incredibar settings

>razakm, I have a idea that there is a file called user.js yes, solution here, in file prefs.js just delete url from string: user_pref("browser.newtab.url", "");

Hi, the hint with user_pref("browser.newtab.url", ""); in about:config was very helpful.

but evertime i opened Firefox the entry were changed. I monitored the prefs.js with notepad++ (for alert on change) everytime i open Firefox the file was changed (not only loaded) few hours later... the entry for newtab were attatched to an existing extension.

1. rename extensions folder in default profile 2. create anew empty extensions 3. move one extension to the new folder 4. open firefox 5. open new tab 6. repeat step 3-4 till the wrong incredibar appear 7. goto the last moved extension folder "extension-folder"\defaults\preferences 8. open prefs.js and delete the row withe the user_pref

MyStart.incredibar is a malicious browser hijacking malware that will change your browser and DNS settings. it may cause redirection of websites to unwanted pages, it may display annoying advertisements (spam) on infected PC, it slows your system down and it may also spy user activities. Mystart .incredibar appears with different clones like my start.incredibar mb 165 and mb185 etc. it can be removed using a legitimate anti-malware program For a full guide on removal of this malware, see http://techvts.com/mystart-incredibar-redirect-removal

I tried MBAM but it has not found the changed file.

See also:

• [/questions/930367?page=2]
• [/questions/931841]