IE homepage is maliciously modified to handle the method

hkey_users/. Default/software/policies/microsoft/internet Explorer/control Panel
The key value under the DWORD Value "Homepage" is modified for the sake of. The original key value is "0" and is modified to "1" (that is, the gray is not selectable).

Due to the control of the malicious program, access to the "IE Toolbar" can no longer change it back. Sometimes, the "can change the homepage" Address bar also becomes gray, cannot adjust again; sometimes, even if you change the URL back, and then open Internet Explorer, the malicious URL came back.
What should we do in this situation? The most common way is to find the appropriate registry file and change it back.
To change the registry file of IE home page as an example, we first start the Windows Registry Editor by clicking the Start button in the lower left corner of the Windows interface, then selecting Run, and entering regedit in the popup dialog.
IE Home Page registry file is placed under the Hkey_current_user/software/microsoft/internet Explorer/main/start page, and this subkey key value is IE home page URL. Taking the author's computer as an example, the key value is http://www.sina.com.cn, it can be modified, users can change their usual URL, or instead of "About:blank", that is, blank page. This way, you can see the effect by restarting IE.
If this does not work, it is because some viruses or rogue software in your computer installed a self-running program, even if you modify the registry to restore the homepage of IE, but you restart the computer, the program will automatically run again to tamper.
In this case, we need to make more changes to the registry file, run "regedit", then expand hkey_local_machine/software/microsoft/windows/current version/run Primary Key, Then delete the Registry.exe subkey under it, then delete the self-running program C:/Program Files/registry.exe and finally reset the start page from the IE option.
In addition to the above situation, some IE has been changed to start page, even if the "Use default page" is still invalid, this is because the default page of IE Start page has also been tampered with. In this case, we can also modify the registry to resolve, run "regedit" to expand Hkey_local_machine/software/microsoft/internet explorer/main/default_page_ URL subkey, and then the "Default_page_ur" subkey in the key value of those tampering with the site's URL, or set to the default value of IE

http://community.csdn.net/Expert/topic/5100/5100505.xml?temp=.9875147

IE homepage is maliciously modified to handle the method