IE title bar Restore _ Registration Form

In recent times netizens surf the internet often encounter an annoying thing, is browsing some websites for the personal homepage after the Internet Explorer's title bar has been tampered with such as "Welcome to visit ..." Web site ", ie's start page, homepage default page is also set up to those Web sites, and even in the visitor's IE right-click menu to add the names of those sites. These are the Web sites to promote their own web site by embedding JavaScript scripting language in the Web page to modify the browser's registry of the corresponding key values caused by, let us these "nets worms" annoying. So how do we restore IE's "true self"? Let's "Break it All".


Tamper with IE title bar

Symptom: The title bar above IE browser is changed to "Welcome to visit ...". Website "style, which is the most common tamper means, the victims are numerous.

Involves subkeys:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\main\window Title

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\main\window Title

Description: The key value of these two "window title" subkeys is the caption in the IE title bar.

Fix method: Run Registry Editor Regedit.exe, expand the two subkeys above, modify the key values of these two subkeys to Microsoft Internet Explorer (ie default), or you can change the key value to look like "my private Browser" This reflects the personality of the title, rerun IE will be able to see the effect. What do you think? Are you feeling very cordial?

Tamper with IE start page

Symptom: Here is the IE start page is a run IE will automatically open the Web page, that is, the start page was changed to tamper with the Web site.

Involves subkeys:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page

Note: The key value of this subkey is the URL of the IE start page.

Fix method: Run Registry Editor, expand the subkey above, and change the key value of the "Start Page" subkey to a URL. If you do not want to run IE automatically open a Web page, you can set the IE start page as a blank page, the "Start Page" subkey key value modified to "About?blank", rerun IE can see the effect. In fact, you can also use the IE option settings to change the starting page of IE, set the method: Click "Tools/internet Options", in the "Home" enter the start page.

Special example: When IE's starting page becomes a certain URL, even if you modify the settings through the options, restart will become their web site, very difficult. In fact, they are in your machine to add a self running program, it will start the system will be your IE start page to their site.

Fix method: Run Registry Editor Regedit.exe, then expand HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\Run primary key sequentially, Then remove the Registry.exe subkey below, and then delete the C:\Program Files\registry.exe from the running program, and then reset the start page from the IE option.

Default page to tamper with IE start page

Symptom (s): Some IE has been changed from the start page, even if the "Use default page" is set, it is still invalid because the default page of IE Start page has also been tampered with.

Involves subkeys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\main\default_page_url

Description: The key value of the subkey is the default page for the start page.

Fix method: Run Registry Editor, and then expand the above subkey, the "Default_page_ur" subkeys in the key values of those tampered with the Web site is good, or set to the default value of IE.

Tampering with IE's default search engine

Symptom: In IE browser's toolbar has a search engine's tool button, may realize the network search, is tampered with only then clicks that Search Tool button to link to that tampering website.

Involves subkeys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\search\customizesearch

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\search\searchassistant

Fix method: Run Registry Editor, expand afore-mentioned subkey in turn, change the key value of "Customizesearch" and "SearchAssistant" to a search engine's URL.

Tamper with IE right click menu

Symptom: There is a "welcome visit" In the pop-up menu when you right-click on the Web page. Website "What would you do?" Is there a demon-ridden feeling?

Involves subkeys:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\menuext\ Welcome to visit ... Website

Description: "Menuext" primary key is IE expansion Menu control key, if you installed an Internet express or network ants, under this subkey can see "Use the Internet Express download" Such a subkey.

Fix method: Run Registry Editor, open the above primary key, under "Menuext" PRIMARY key will have "Welcome to visit ..." Site "The primary key of similar content, delete it, but before you delete it, you can expand the primary key. Look, there's a link in here that opens a subkey for an HTML file, looks at the file path, and then deletes the file according to the path (note that this HTML file is set to a hidden attribute, from the menu to select" View/Folder Options/view page/Show All Files "you can see it!" )。 This is completely clear clean, is not a sense of relief? Oh!

Pop-up dialog box at system startup

Symptom: When power-on, will eject the recommendation website "Welcome to visit www ..." style window. After entering the system, will automatically open IE browser, automatic access to the default home page www ... and cannot be changed.

Involves subkeys:

hkey_local_machine\software\microsoft\windows\currentversion\

Winlogon\legalnoticecaption

hkey_local_machine\software\microsoft\windows\currentversion\

Winlogon\legalnoticetext

Description: In fact, this primary key is not related to IE, but the Windows Login prompt dialog box control.

Fix method: Run Registry Editor, then expand the primary key above, and then delete the "LegalNoticeCaption" and "LegalNoticeText" primary keys.

Summary

The above describes several tampering methods involved in the subkeys and recovery method, but some tampering with the site involved in the subkeys and the location of the boot program will not be the same path or there is a new tamper "technology" appears, then how to do? It doesn't matter, we still have a trick, can status quo. When you don't know what subkeys they have modified, you can "look at the nature through the phenomena" Enter Registry Editor, and then press the "F3" key to open "find", find the content is that tamper with the site name or Web site, when found you can be the corresponding key value or delete or modify, and then press the "F3" button Find Next, until you clean them up. For setting up the running program or setting up a file link, you also have to follow the file path to Grong and punish it quickly after the map.