IE: 13 simple solutions for malicious Modification

Source: Internet
Author: User
Tags microsoft outlook

1. webpage viruses that damage ie browsers:

(1). The default homepage is modified.

1. Damage characteristic: the default home page is automatically changed to a website URL.

2. form: the default homepage of the browser is automatically set to a URL such as ********. com.

3. clear method: manually modify the Registry. Choose Start> RUN> Regedit> OK to open the registry editing tool. Open hkey_local_usersoftwaremicrosoftinternet assumermain in sequence, find the default_page_url Key Value Name (used to set the default homepage) and right-click in the right window to modify it. Press F5 to refresh.

Hazard level: Average

(2). The default homepage is modified.

1. Damage: the default homepage is automatically changed to the website address of a website.

2. form: the default homepage of the browser is automatically set to a URL such as ********. com.

3. clear method: manually modify the Registry. Choose Start> RUN> Regedit> OK to open the registry editing tool. Open the hkey_local_usersoftwaremicrosoftinternet assumermain branch in the following order, find the startpage Key Value Name (used to set the default homepage) and right-click the page to modify it. Press F5 to refresh.

Hazard level: Average

(3). The default Microsoft homepage is modified.

1. Damage characteristic: by default, the Microsoft homepage is automatically changed to a website URL.

2. Representation: by default, the Microsoft homepage is tampered.

3. cleanup method:

(1) manually modify the Registry method: Start Menu-> Run-> Regedit-> OK. Open the registry editing tool in the following order: hkey_local_machinesoftwaremicrosoftinternetexplorermain branch, find the default_page_url Key Value Name (used to set the default Microsoft homepage), right-click in the right window, change the key value to http://www.microsoft.com/windows/ie_intl/cn/start. Press F5 to refresh.

(2) Automatic File Import registry method: Please input or paste the following content into notepad, any file name with the extension Reg exists in any directory of drive C, and then execute this file, according to the prompts, one confirmation will show that the Registry is successfully imported.

Regedit4

[Hkey_local_machinesoftwaremicrosoftinternet assumermain]
"Default_page_url" = "http://www.microsoft.com/windows/ie_intl/cn/start"

Hazard level: Average

(4). the homepage settings are blocked and locked, and the setting options are invalid and cannot be changed.

1. Damage feature: the home page settings are disabled.

2. form: the address bar of the home page is dimmed and blocked.

3. clear method: (1) manually modify the Registry method: Start Menu-> Run-> Regedit-> OK. Open the registry editing tool in the following order: hkey_current_usersoftwaremicrosoftinternetexplorer branch, create a "controlpanel" primary key, and then create a DWORD value with the key value "Homepage" under this primary key. The value is "00000000", and press F5 to refresh and take effect.

(2) Automatic File Import registry method: Please input or paste the following content into notepad, any file name with the extension Reg exists in any directory of drive C, and then execute this file, according to the prompts, one confirmation will show that the Registry is successfully imported.

Regedit4

[Hkey_current_usersoftwarepoliciesmicrosoftinternet assumercontrol panel]
"Homepage" = DWORD: 00000000

Hazard level: mild

(5). The default IE search engine is modified.

1. Damage: change IE's default Microsoft search engine.

2. Representation: search engines are tampered.

3. clear method: (1) manually modify the Registry method: Start Menu-> Run-> Regedit-> OK, open the registry editing tool. First, open the hkey_local_machinesoftwaremicrosoftinternet assumersearch branch in the following order, find the "searchassistant" Key Value Name and click "modify" in the right window. Then, enter "Custom" as the key value, and find the "customizesearch" key value name, modify the key value to http://ie.search.msn.com/?sub_rfc1766#/srchasst/srchasst.htm. Press F5 to refresh the key.

(2) Automatic File Import registry method: Please input or paste the following content into notepad, any file name with the extension Reg exists in any directory of drive C, and then execute this file, according to the prompts, one confirmation will show that the Registry is successfully imported.

Regedit4

[Hkey_local_machinesoftwaremicrosoftinternetexplorersearch]
"Searchassistant" = "http://ie.search.msn.com/?sub_rfc1766#/srchasst/srchasst.htm"
"Customizesearch" = "http://ie.search.msn.com/?sub_rfc1766#/srchasst/srchasst.htm"

Hazard level: Average


(6) illegal information added to the IE title bar

1. Damage Characteristics: by modifying the registry, the IE title bar is forcibly added to the advertisement information of the publicity website.

2. Form: on the blue title bar at the top of IE, there is an extra "punctual network, even if it is a punctual network! Http://www.zhengdian.com "tail.

3. clear method: (1) manually modify the Registry method: Start Menu-> Run-> Regedit-> OK, open the registry editing tool. First, open the hkey_current_usersoftwaremicrosoftinternet assumermain branch in the following order, find the "window title" key value, enter Microsoft Internet Explorer, and press F5 to refresh.

Second, open the hkey_current_machinesoftwaremicrosoftinternetexplorermain branch in the following order, find the "window title" Key Value Name, enter the key value Microsoft Internet Explorer, and press F5 to refresh and take effect.

(2) Automatic File Import registry method: Please input or paste the following content into notepad, any file name with the extension Reg exists in any directory of drive C, and then execute this file, according to the prompts, one confirmation will show that the Registry is successfully imported.

Regedit4

[Hkey_current_usersoftwaremicrosoftinternet assumermain]
"Window title" = "Microsoft Internet Explorer"

[Hkey_local_machinesoftwaremicrosoftinternet assumermain]
"Window title" = "Microsoft Internet Explorer"

Hazard level: Average

(7) features of damage caused by illegal information added to the OE title bar:

Damaging features: by modifying the registry, You can integrate emails with Microsoft Program Add advertisement information for the promotion website in the top title bar of Microsoft Outlook br]
Format: Add invalid information in the blue title bar of Outlook Express at the top.

Clear method: (1) manually modify the Registry method: Start Menu-> Run-> Regedit-> OK. Open the registry editing tool in the following order: hkey_local_usersoftwaremicrosoftoutlook express branch, find the windowtitle and store root key values and set them to null. Press F5 to refresh.

(2) Automatic File Import registry method: Please input or paste the following content into notepad, any file name with the extension Reg exists in any directory of drive C, and then execute this file, according to the prompts, one confirmation will show that the Registry is successfully imported.

Regedit4

[Hkey_current_usersoftwaremicrosoftoutlook express]
"Windowtitle" = ""
"Store root" = ""

Hazard level: Average

(8). Right-click the menu and add an illegal website link:

1. Damage characteristic: by modifying the registry, right-click the menu to add a link to the illegal site.

2. Form: add such link information as "Home of the Internet.

3. clear method: (1) manually modify the Registry method: Start Menu-> Run-> Regedit-> OK. Open the registry editing tool in the following order: hkey_current_usersoftwarepoliciesmicrosoftinternet assumermenuext branch, in the left-side window, all primary keys that belong to illegal links are deleted. Press F5 to refresh and take effect.

4. hazard level: Average

(9). The shortcut menu function is disabled abnormally:

1. damage features: by modifying the registry, right-clicking the pop-up menu function is completely disabled in IE browser.

2. Representation: Right-click in IE and there is no response.

3. clear method: (1) manually modify the Registry method: Start Menu-> Run-> Regedit-> OK. Open the registry editing tool in the following order: hkey_current_usersoftwarepoliciesmicrosoftinternet assumerrestrictions branch, find the "nobrowsercontextmenu" Key Value Name, set its key value to "00000000", and press F5 to refresh.

(2) Automatic File Import registry method: Please input or paste the following content into notepad, any file name with the extension Reg exists in any directory of drive C, and then execute this file, according to the prompts, one confirmation will show that the Registry is successfully imported.

Regedit4

[Hkey_current_usersoftwarepoliciesmicrosoftinternet explorerrestrictions]
"Nobrowsercontextmenu" = DWORD: 00000000

Hazard level: mild

(10). ie favorites are forcibly added to illegal website address links

Damage Characteristics: by modifying the registry, the link information of illegal websites is automatically added to the IE favorites folder.

Form: Hide under favorites.

Clear method: manually clear it. Right-click the illegal website and choose delete from the shortcut menu.

Hazard level: Average


(11). The IE Toolbar does not contain the Add button.

Damage feature: add an invalid button in the toolbar.

Format: There is a button icon.

Clear method: Right-click the menu and select "delete.

Hazard level: Average

(12). Lock the drop-down menu in the address bar and add text information

Damage Characteristics: by modifying the registry, lock the drop-down menu in the address bar to Gray.

Format: not only does the drop-down menu disappear, but it overwrites illegal text information.

Clear method: (1) manually modify the Registry method: Start Menu-> Run-> Regedit-> OK. Open the registry editing tool in the following order: hkey_current_usersoftwarepoliciesmicrosoftinternet assumertoolbar branch, in the right-side window, find the "linksfoldername" key value and set its key value to "Link". Remove all unnecessary characters and press F5 to refresh the key.

Hazard level: mild

(13) "source file" under "View" in. ie menu is disabled

Damage Characteristics: by modifying the registry, lock the "source file" under "View" in the IE menu to Gray.

Format: the source file item is unavailable.

Clear method: (1) manually modify the Registry method: Start Menu-> Run-> Regedit-> OK, open the registry editing tool. First, open the hkey_current_usersoftwarepoliciesmicrosoftinternet assumerrestrictions branch in the following order, find the "noviewsource" Key Value Name, set its key value to "00000000", and press F5 to refresh.

Open the hkey_local_machinesoftwarepoliciesmicrosoftinternet assumerrestrictions branch in sequence, find the "noviewsource" Key Value Name, set its key value to "00000000", and press F5 to refresh it.

(2) Automatic File Import registry method: Please input or paste the following content into notepad, any file name with the extension Reg exists in any directory of drive C, and then execute this file, according to the prompts, one confirmation will show that the Registry is successfully imported.

Regedit4

[Hkey_current_usersoftwarepoliciesmicrosoftinternet explorerrestrictions]
"Noviewsource" = DWORD: 00000000

[Hkey_local_machinesoftwarepoliciesmicrosoftinternet assumerrestrictions]
"Noviewsource" = DWORD: 00000000

Hazard level: mild

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.