Analysis of 13 major symptoms of malicious webpage virus

1. Webpage viruses that damage IE browsers:

(1). The default homepage is modified.

1. Damage characteristic: the default home page is automatically changed to a website URL.

2. Form: the default homepage of the browser is automatically set to a URL such as ********. COM.

3. clear method: manually modify the registry. Choose Start> Run> regedit> OK to open the registry editing tool. Open HKEY_LOCAL_USERSoftwareMicrosoftInternet assumermain in sequence, find the Default_Page_URL key value name (used to set the default homepage) and right-click in the right window to modify it. Press F5 to refresh.

Hazard level: Average

(2). The default homepage is modified.

1. Damage: the default homepage is automatically changed to the website address of a website.

2. Form: the default homepage of the browser is automatically set to a URL such as ********. COM.

3. clear method: manually modify the registry. Choose Start> Run> regedit> OK to open the registry editing tool. Open the HKEY_LOCAL_USERSoftwareMicrosoftInternet assumermain branch in the following order, find the StartPage key value name (used to set the default homepage) and right-click the page to modify it. Press F5 to refresh.

Hazard level: Average

(3). The default Microsoft homepage is modified.

1. Damage characteristic: by default, the Microsoft homepage is automatically changed to a website URL.

2. Representation: by default, the Microsoft homepage is tampered.

3. Cleanup method:

(1) manually modify the registry method: Start menu-> Run-> regedit-> OK. Open the registry editing tool in the following order: HKEY_LOCAL_MACHINESoftwareMicrosoftInternetExplorerMain branch, find the Default_Page_URL key value name (used to set the default Microsoft homepage), right-click in the right window, change the key value to http://www.microsoft.com/windows/ie_intl/cn/start. Press F5 to refresh.

(2) automatic file import registry method: Please input or paste the following content into Notepad, any file name with the extension reg exists in any directory of drive C, and then execute this file, according to the prompts, one confirmation will show that the registry is successfully imported.

REGEDIT4

[HKEY_LOCAL_MACHINESoftwareMicrosoftInternet assumermain]
"Default_page_url" = "http://www.microsoft.com/windows/ie_intl/cn/start"

Hazard level: Average

(4). The homepage settings are blocked and locked, and the setting options are invalid and cannot be changed.

1. Damage feature: the home page settings are disabled.

2. Form: the address bar of the home page is dimmed and blocked.

3. clear method: (1) manually modify the registry method: Start menu-> Run-> regedit-> OK. Open the registry editing tool in the following order: HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorer branch, create a "ControlPanel" primary key, and then create a DWORD value with the key value "HomePage" under this primary key. The value is "00000000", and press F5 to refresh and take effect.

(2) automatic file import registry method: Please input or paste the following content into Notepad, any file name with the extension reg exists in any directory of drive C, and then execute this file, according to the prompts, one confirmation will show that the registry is successfully imported.

REGEDIT4

[HKEY_CURRENT_USERSoftwarePoliciesMicrosoftInternet assumercontrol Panel]
"HomePage" = dword: 00000000

Hazard level: Mild

(5). The default IE search engine is modified.

1. Damage: change IE's default Microsoft search engine.

2. Representation: Search engines are tampered.

3. clear method: (1) manually modify the registry method: Start menu-> Run-> regedit-> OK, open the registry editing tool. First, open the HKEY_LOCAL_MACHINESoftwareMicrosoftInternet assumersearch branch in the following order, find the SearchAssistant key value name and click modify in the right window to enter its key value as: http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm, then find the CustomizeSearch key value name and change its key value to: http://ie.search.msn.com/{SUB_RFC1766}

<