IE browser has been tampered with completely secret

During this period of time, Internet users often encounter an objectionable thing when surfing the Internet. They are browsing some websites � after the personal homepage, the title bar of IE has been changed to something like " Welcome to the "Website" text, IE's start page, home page default page is also set to the website URL, and even more in the visitor's IE right-click menu to add those website names. This is caused by the fact that those websites promote their own websites by embedding the javascript scripting language in the web pages to modify the corresponding key values ​​in the viewer's registry, which makes us "networms" annoying. So how do we restore IE's "original face"? Let's break it down.

Tampering with the IE title bar

Symptom: The title bar above the IE browser has been changed to the "Welcome to Visit... Website" style, which is the most common means of tampering and has many victims.

Subkeys involved:

HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Window Title

HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\Window Title

Description: The key values ​​of the two "Window Title" subkeys are the titles in the IE title bar.

Fix: Run the registry editor regedit.exe, expand the above two subkeys, change the key values ​​of these two subkeys to "Microsoft Internet Explorer" (IE default), or you can The key value is changed to a title like "My Dedicated Browser", and you can see the effect by re-running IE. how about it? Do you feel very kind?

篡 IE start page

Symptom: The IE start page mentioned here is a web page that will open automatically when running IE, which means that the start page has been changed to tampering with the website. URL.

Subkeys involved:

HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page

Description: The key value of this subkey is the URL of the IE start page. .

Repair method: Run the registry editor, expand the above subkeys, and modify the key value of the "Start Page" subkey to a certain URL. If you don't want to open a web page automatically when you run IE, you can set the IE start page as a blank page, and change the key value of the "Start Page" subkey to "about�blank". You can re-run IE. See the effect. In fact, you can also change the start page of IE through the option settings of IE. Set the method: Click “Tools/Internet Options” and enter the start page in “Home”.

Special example: When IE's start page becomes a certain URL, even if you modify it through the option settings, it will become their URL after restarting, which is very difficult. In fact, they added a self-running program to your machine, which will set your IE start page to their website when the system starts.

Fix: Run the registry editor regedit. Exe, then expand the HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\Current Version\\Run primary key, and then place the registry under it. Delete the exe subkey, then delete the self-running program c:\\Program Files\ egistry.exe, and finally reset the start page from the IE option.

Tampering with the default page of the IE start page

Symptom: After some IEs have been changed to the start page, even if "Use default page" is set, it is still invalid. This is because the IE start page The default page has also been tampered with.

Subkeys involved:

HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\Default_Page_URL

Description: The key value of this subkey is the default page of the start page.

Fix: Run the registry editor, then expand the above subkeys, change the URL of the tampering website in the key value of the "Default_Page_UR" subkey, or set it to the default value of IE. .

Tampering with IE's default search engine

Symptom: There is a search engine tool button in the toolbar of IE browser, which can realize web search. Just click on the search tool button after being tampered with. Will link to the tampering website.

Subkeys involved:

HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Search\\CustomizeSearch

HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Search\\SearchAssistant

Repair method: Run the registry editor, expand the above sub-keys, and change the key values ​​of “CustomizeSearch” and “SearchAssistant” to the URL of a search engine.

篡 IE right-click menu

Symptom: What happens when you right-click the mouse while browsing the web and there is a "Welcome to visit... website" in the pop-up menu? Is there a feeling of demon-ridden?

Subkeys involved:

HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\MenuExt\\Welcome to visit...Website

Description: The "MenuExt" primary key is an IE extended menu item. Control the primary key. If you have an internet express or network ant installed in your machine, you can see the subkeys "Use Internet Express Download" under this subkey.

Repair method: Run the registry editor, open the above primary key, under the "MenuExt" primary key, there will be a "welcome to visit ... website" similar content of the primary key, delete it, but before deleting you can Expand this primary key to see, there is a link to open a subkey of an HTML file, look at the file path, and then delete the file according to the path (note that this HTML file is set with hidden properties, select from the menu) View /Folder Options /View Page /Show All Files" to see it!). This is completely clear and clean, is there a feeling of relief? Ha ha!

Pop-up dialog box when the system starts up

Symptom: When booting, the window of the recommended website "Welcome to http://www..." will pop up. After entering the system, it will automatically open IE browser, automatically access the default main http://www...... and cannot be changed.

Subkeys involved:

HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\

Winlogon\\LegalNoticeCaption

HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion \\

Winlogon\\LegalNoticeText

Description: In fact, this primary key is not related to IE, but the control of the Windows login prompt dialog.

Repair method: Run the registry editor, and then expand the above primary key, and delete the "LegalNoticeCaption" and "LegalNoticeText" primary keys.

Summary The subkeys involved in tampering and the recovery methods are described above, but some of the subkeys involved in tampering with the website and the path to the self-starting program will be different or there will be new tampering. "Technology" appears, what should I do? It doesn't matter, we still have a trick that can be changed in the same way. When you don't know which subkeys they modify the registry, you can "see the essence through the phenomenon", enter the registry editor, and then press the "F3" button to open the "find", find the content is the website that tampering with the website Name or URL, when found, you can delete or modify the corresponding key value, and then press the "F3" button to "find the next" until you clean them up. For the case where the self-running program is set or the file link is set, you have to follow the file path to go straight to the yellow dragon and smash it to the map, hehe!

Of course, the most effective way to cure the problem is that the "prawn" friends who make the webpage can find the lost way in their early conscience, so that we can feel more secure when these little "novices" go online, otherwise it is really Become a scared bird! These are the big secrets of the recent "popular" tampering methods. I hope that they will have a little effect on everyone. Welcome to exchange more letters.