http://qzycf.blog.163.com/blog/static/17027058200832685044994/
Yesterday installed a game downloaded from the multi-special website, home was modified, I first use regedit to find "2345.com" deleted, the results on the desktop of IE shortcuts can not be used, quick start can, the desktop deleted, copy the Quick Launch of the desktop, the back of the following is the same as this man said
IE was changed into HTTP://WWW.2345.COM/?QQ. It's not going to change.
Today, I do not know how the unit computer poisoning, ' Look at a half-day ' also did not kill the poison ' later on the internet a trick to know ' original he ... Everyone in the www.2345.com virus, in fact, this is the site promoters use a very good way, so generally do not find out what the problem. Notice that the first face is http://www.2345.com/?duote2.
This site is not from the Quick launch of the launch of the bar is the. And the Internet Explorer on the desktop of the properties of your own home page or your own set, not changed. So there is sometimes this site, sometimes double not, check also can not find out, because you generally do not care when you start IE from the desktop is not from the Quick Launch bar,
At this point you use the reverse button (right mouse button) Click on the Quick Launch bar IE shortcuts, found the problem is.
Teach you a most effective method of elimination, first of all, this is just a small trick, 2345 basically did not modify the IE main program, just modified the registry, the result of most of the removal tool can not be cleared. Click "Start", then click "Run (R)", enter "regedit" to open the registry,
Open to "Hkey_classes_root/clsid/{871c5380-42a0-1069-a2ea-08002b30309d}/shell/openhomepage/command",
Double-click (default) to display "C:/Program files/internet explorer/iexplore.exe" in "Value data (V)" http://in Http://www.2345.com/?duote2 Www.2345.com/?duote2 "Delete, or change to Baidu http://www.baidu.com or blank page/your favorite page."