Solutions for forced Internet Explorer connection to a website

Recently, both myself and my friends were guided to click a website when chatting or browsing the Web page, and downloaded a small program with knowledge or without knowledge, resulting in forced connection to different websites on the IE homepage. When I went to the Forum for help, I found that many of my friends encountered this problem. Although the cause is different from that of connecting to a website, it is similar to the method. So I summarized a set of methods and studied them with everyone, hoping they would not be harassed by such malicious programs!

1. Right-click IE and choose "internet" to check whether the "Homepage" item of internet option settings has been modified. If so, change it to a blank page and clear the temporary IE folder.

Second, upgrade "Rising antivirus software" to the latest version to check whether viruses are running in the memory (only scan for memory ).

Third: Enter the msconfig command in the "run" item in the Start menu to bring up the "System Configuration Utility" and check the "Start" item. (2000 the system can copy MSCONFIG from the XP system. you can also use third-party software, such as Windows optimization master ). Record the file name and path of each unknown startup Item and cancel these items.

4. Press CTRL + ALT + DEL to open the task manager, check whether the program with the same name as the startup Item is running in the process, and try to end the process! (Note: This name may be the same as some system programs, that is, malicious attack programs disguise them as system processes. There may be two processes with the same name, which may be the culprit you are looking .)

Appendix: known camouflage Process

English file name taskmgr.exe Chinese name "Task Manager"

Symptom: two processes with the same name run simultaneously, which cannot be distinguished. However, when the process ends correctly, the task manager is closed, while when the counterfeit process ends, the IE automatic connection problem can be solved temporarily!

Fifth, search for the file path you have just finished following the process path found in the startup Item. Open my computer, choose tools> Folder Options> View from the menu at the top of the window, and click show all files and folders, at the same time, cancel the check before "Hide protected operating system files" to fully check all files. (Note: known malicious programs are hidden in depth. In 98 systems, you must enable the show hidden files function. In 2000 and XP systems, you must also disable the function of hiding protected operating system files)

6. Right-click the target file to view its attributes. Note that the creation time and modification time are the same or slightly different for most of the virus files. This time is the time you just took. Also, set the check to detailed information to check whether there are files created at the same time in this folder. The virus may pretend to be files in audio and video or other formats, do not be confused by it, or click to run it. Compress them in the same place immediately and change them to other names. This can relieve the threat and prevent accidental deletion of system files. (If you are prompted that the program is running, you can restart the machine and press F8 to enter safe mode, and then compress) Of course, if you can confirm it is a virus, you 'd better delete it directly ~

7. Use the "Search" function in the Start menu to completely search for the files you can find on the hard disk and check whether the files are deleted at other locations. (The malicious program I encountered is the notepad.exe Notepad program which is disguised as the task manager, and all the notepad files are opened through it, that is to say, when you open a notepad file, the malicious program will run again .) In addition, manually check whether virus files with the same name exist in the windows folder, and carefully check the system and system32 folders in windows, I found that the latest virus has added its copies to the above three folders. If it is clear that it is not clean, it is likely to be revived!

8. Restart your computer, connect to the Internet, and open IE to see if it has recovered. If not, perform a more detailed analysis based on the above method to see if any omission exists.

9. Don't be too happy to solve the problem. Websites guided by such malicious programs may carry viruses or Trojans. Please upgrade anti-virus software to the latest version and go to security mode to completely scan and kill it to ensure security!

The above is the experience I have summarized based on my actual situation and hope to help me with the same problem. In addition, I would like to remind you not to be driven by curiosity. You can click on a strange website or receive unknown files ~