Is there a way to track the "history" of what has happened on my computer? The virus is back (myincredibar.com)

I know that my daughter is the cause of my computer getting myincredibar.com AGAIN...

My daughter's computer crashed, so she has a "friend" repairing it who has had it for 6 months and it still does not work.

Thanks to everyone here, I was able to wipe and start over with this computer and get rid of the virus. Everything was fine until my daughter used the computer in the last couple of days and the virus is back.

She is now banned from my computers and I have put passwords on both to ensure she does not use them. AT this point, she can wait for hers to get back (if it ever does).

My question though is about tracking the history of what happened. My guess is that she downloaded something from an email or maybe from Facebook that she clicked on again or something like that. Since she claims she did nothing like that, it would be nice to show it to her where she downloaded something and the problem started.

I know this is probably far-fetched and most likely impossible without installing software first, I thought I would give it a try.

The bad news is that I will wipe and restore the computer AGAIN. I tried to just restore it, but it did not work. I guess I need to change my restore settings.

Anyway.. Here is to hoping..... I also have another question about my other computer and wiping and redoing the HD, but thought it best to keep the threads separate.
Is there a way to see what has happened and to trace events on this computer?

Do you mean like save the browser history, clean the computer, and then test each of the saved URLs hoping to reinfect your computer just to prove a point?

It's just herpes. Everyone's got one form or another.

What anti virus / antispyware software are you using? If none, or not up to date, then get some and let your daughter back on the computer

The reason I wanted to see the history is to see if I could figure out what happened or how the virus got back on my computer.

1. No, I have no desire to reinfect my computer. My daughter is doing a great job of that.
2. I am certain my daughter did not do it on purpose, but her computer crashed and mine was working fine after I got rid of the virus. My daughter used the computer and it came back.
3. If it is herpes, I would have had more fun catching it.
4. I only use Chrome. I no longer use Firefox as it is too slow and only use IE once in a blue moon, such as when Chrome has an issue or something like that.
5. I use Microsoft Security Essentials and let it update itself automatically. I have used it since it came out.
6. I looked at the Event viewer and nothing looks out of the ordinary, but I am not exactly sure what I am looking for.

Thanks everyone.

No, I am not using K9 or OpenDNS.

My daughter was using the computer when it happened, yet she claims she only went on Twitter and Facebook. When I asked further she mentioned that oh yeah, she did go on AOL and gmail... You know how teenagers are, they do nothing wrong and there is no way they messed anything up.

I am happy to switch to Avast, but the posts here at FW and online said MSE was a better choice.

I kind of knew that the event log would not show here is y9our virus, but I was looking for something that was out of the norm, such as a russian website or an error, or something that seemed to have caused a problem.

Thanks again

Thanks

You are already using Chrome, which is a good step. But put AdBlock Plus on it and install Sandboxie. Also, create a second account on the PC for your daughter to use. Some of these types on things will stick to the user account it happened in.

As for figuring out where she went in Chrome, click on the wrench then click on History.

minidrag said:   You are already using Chrome, which is a good step. But put AdBlock Plus on it and install Sandboxie. Also, create a second account on the PC for your daughter to use. Some of these types on things will stick to the user account it happened in.

As for figuring out where she went in Chrome, click on the wrench then click on History.

I installed Sandboxie and adblock plus and will be setting up separate accounts for her on my computers.

I definitely appreciate all of this.

minidrag is on the right track - give her a separate, non-privileged, account and the chances of re-infection drop dramatically.

He wiped and started over so I don't think it was just waiting. Unless he didn't really wipe it.

minidrag said:   He wiped and started over so I don't think it was just waiting. Unless he didn't really wipe it.

I did wipe it. I used what Lenovo calls their One Key to do it.

My daughter's computer is under warranty and since her computer friend could not fix it, she said there was no way her dad could do it. Meanwhile, mine is working just fine and hers is still at the shop. LOL

I do have and have run malwarebytes, but did not run, reboot, etc...

It actually came back and I did the following that got rid of it this time:
http://www.im-infected.com/hijacker/mystart-by-incredibar-mystart-incredibar-com.html

Maybe what happened was some program you installed/upgraded just installed myincredibar without you knowing it. Reason for this thinking is that when I tried to update IZArc, incredibar was installed on my system even though I tried to uncheck everything. Anyway, all that is needed to remove this is to go to Programs & Features and uninstall it. Then go to manage add-ons section of the browser and remove any entries from there.