Home hijacking issues

Recently always open the browser will wait a long time, and not open the default home page set, but instead jump to a www.huajiufu.com net, Baidu a bit of this net, said to be a net under the 2345 website, judge is the homepage was hijacked.

Repair process:

1. Using the Online method: Open Firefox Shortcut Properties--see the target--after firefox.exe followed by the jump net, try to delete the save, the prompt cannot be saved, this method is invalid, the shortcut is deleted, re-establish a new shortcut, open properties found this net is still in the target item, this method is invalid

2, in the Address bar type About:support, the upper right corner set browser default settings, restart the browser, open the default home page, but close the browser to reopen, Still be jump to www.huajiufu.com, set to blank page, do not jump, show only blank page, set homepage Still, do not solve the problem

3, 360 security Defender--Homepage Repair--scan--scan out several problematic browser shortcut exceptions, including Firefox, hints are there are other jumps, one-click Repair, restart, problem solving, open the browser is also fast up

4, there is a possibility that antivirus software may also tamper with the home page for their own net, need to be set up in the anti-virus software, such as the poison bully will be browsing the homepage to the home of the poison bully

5, Lock the homepage is also a good way

Attached to the online repair DNS hijacking method:

1, regional, there are more than one computer domain name jump, please call the operator directly to the operator (the most effective solution, suggest a little tougher in the process of complaints).

2. Open the browser settings option or ctrl+h, emptying the user's cache files and cookies.

3. Check if the Hosts file has been changed: (1) win+r, enter "C:\Windows\System32\drivers\etc\". (2) Using the administrator, select the text file to open the way. (3) Check if the domain name is hijacked for 2345 and 9991 and delete the line directly. (For example: Point to 0.0.0.0, 127.0.0.1, 127.1, or other IP address) (4) Exit save.

4. Modify the local network DNS to 8.8.8.8 and 114.114.114.114: (1) Open Network Connections, network and Internet, Control Panel.

(2) Select a network of users, right-click the properties.

(3) Find "Internet Protocol 4 (TCP/IPV4)" Double click to enter.

(4) Configure DNS server 8.8.8.8 and 114.114.114.114.

5, modify the user router DNS for 8.8.8.8 and 114.114.114.114: (1) win+r, enter CMD return. (2) Enter Ipconfig-all carriage return and record the gateway IP. (3) Enter the gateway IP in the browser address bar. (4) If the user does not know the password, try "User name admin, password admin" or "username root, password root". (5) Go to find set DNS (non-dynamic DNS) to set DNS to 8.8.8.8 and 114.114.114.114.

Other ways:

http://www.zhihu.com/question/21883209

The homepage was tampered with by Heu_kms_activator.

Workaround:
View browser Properties-target, delete the URL that was last tampered with.

File cleanup:
Remove the Heukmsactivitor directory under C:\Windows

Registry cleanup:
Delete the Start Page key value in both places
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
[Hkey_local_machine\software\wow6432node\microsoft\internet Explorer\Main]

Cabbageyang
Links: http://www.zhihu.com/question/21883209/answer/72064188
Source: Know
Copyright belongs to the author. Commercial reprint please contact the author for authorization, non-commercial reprint please specify the source.

This article is from the cloud blog, so be sure to keep this source http://weimouren.blog.51cto.com/7299347/1812506

Home hijacking issues