Summary of Solutions to System Security: how IE is maliciously modified

I often hear people say that my computer's IE has been maliciously modified. I have also encountered such problems. I was so depressed when I suddenly got a webpage. Later, I searched the internet and briefly summarized their methods. I sent them to the beginner's portal in this forum, especially the hacker!

There are several solutions below.

1. Modify the IE Toolbar

In general, you can modify the IE homepage through the "Tools"-"Internet Options"-"general"-"Homepage" function module in the IE Toolbar.

In the pop-up window, you only need to enter your frequently-used website in the address bar of "changeable Homepage", and then click the "use current page" button below to set it as your IE homepage; if you click "Use blank page", the IE homepage will be changed to the homepage of Microsoft China. The "Use blank page" option is to display the IE homepage as "about: A blank page with the words "blank" to facilitate entering the URL.

2. Modify the Registry

In many cases, the above method does not work because it is controlled by a malicious program or has a trojan virus. Sometimes, the address bar of the "homepage can be changed" turns gray, sometimes, even if you change the web site back and enable Internet Explorer, the malicious Web site will run back. It's really big ~~ In this case, the most common method is to modify the Registry file.

First, start the Registry Editor for Windows. Specifically, click the start button in the lower-left corner of the Windows interface, and then select Run ", in the displayed dialog box, enter regedit to go to the Registry Editor.

The Registry file of the IE homepage is stored in: HKEY_CURRENT_USERSoftwareMicrosoftInternet assumermainstart Page, and the key value of this Sub-key is the URL of the IE homepage. Take the author's computer as an example, the key value is http://www.hao123.com, it can be modified, the user can be changed to their own commonly used web site, or changed to "about: blank", that is, a blank page. In this way, you can restart IE to see the effect.

If this method does not work, it is because some viruses or rogue software has installed a self-running program in your computer. Even if you have restored the IE homepage by modifying the registry, but when you restart your computer, the program will automatically run and tamper with it again.

At this time, we need to make more modifications to the Registry file, Run "regedit", and then expand HKEY_LOCAL _

MACHINESoftwareMicrosoftWindowsCurrent VersionRun primary key, then delete the unknown promoter key value under it, then delete its unknown self-running program file, and finally reset the start page from the IE option.

In addition to the preceding situation, some IE homepage changes still do not work even if "use history page" is set. This is because the history page of the IE start page is also tampered. In this case, we can also modify the registry and run "regedit" to expand: HKEY_LOCAL_MACHINESoftwareMicrosoftInternetExplorerMain.

Default_Page_URL sub-key, and then change the modified URLs in the "Default_Page_UR" sub-key value, or set it to the default value of IE.

Iii. Use ie repair Software

Although the registry modification method is very effective, it is more professional for general computer users and involves a lot of English during the editing process. Therefore, we will introduce how to use some specialized repair tools.

Generally, there are two major types of IE repair tools. First, auxiliary tools provided by commercial institutions, such as rising registry repair tools, ierepair experts attached to 3721 of Internet assistants, and ierepair tools from super rabbits. Most of these software are bundled in commercial software or tool software, some of them still need to be paid for use. It features powerful functions and is recommended for users with strong economic strength.

The Registry Repair Tool of rising can be downloaded independently for free. For specific usage instructions, refer to the help files of these software.

Another point is to check the system startup Item and input msconfig in the running to view the startup Item. Here you can find the URL of the website accessed at each startup, there is also a connection to the local machine in the startup bar, which may be a connection *. js files should be carefully searched. After selecting the check box on the left, follow the path to remove *. delete the JS file and restart the system.