There are many depressing things about surfing the Internet, among which the tampering of IE home page is one of them. So how should the browser home page be modified by virus and Trojan horse be solved? The following Xiaobian will share with you the solution to the modification of the browser home page. Let's enjoy it.
Solution to the modification of browser home page
Delete the IE on the desktop and build your own ie shortcut. You don't have to worry about changing the IE home page.
1. Right click on the desktop -- new -- shortcut -- (enter a web address here) (the web address here can be changed at will) -- next -- Internet Explorer (the name here can also be changed freely) -- finish
2. Right click the new shortcut, properties -- change icon -- browse -- (select the directory where your IE is installed first) (C: \ program files \ Internet Explorer) -- IExplore Exe (this is the IE icon, and the icon is the common green IE) -- OK
When changing the icon, you can choose any icon you like, not necessarily the IE icon
don't worry! Just the registry has been modified by malicious programs. Just change it back. It's very simple!
To start, click "run" and enter regedit
Find it in the registry
HKEY_ CLASSES_ ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\OpenHomePage\Command
See if the data shows it
"C:\Program Files\Internet Explorer\iexplore.exe"
(if your registration form has been changed, generally follow the changed page and delete that page. (your situation should be) http://www.mywel.cn/ (all right)
If not, change it to the above. That's all
Take the modification of the registry file on the IE home page as an example, we first need to start the registry editor of windows. The specific method is to click the "start" button in the lower left corner of the windows interface, select "run", and enter "regedit" in the pop-up dialog box to enter the registry editor.
The registry file of IE home page is placed in HKEY_ CURRENT_ Under user \ software \ Microsoft \ Internet Explorer \ main \ start page, and the key value of this subkey is the URL of the IE home page. Taking the author's computer as an example, the key value is http://www.sina.com.cn , it can be modified. Users can change it to their commonly used website or "about: Blank", that is, a blank page. In this way, you can see the effect by restarting ie.
If you tamper with the registry of the computer, even if you tamper with it, you will not be able to restart the computer automatically.
At this time, we need to make more modifications to the registry file, run "regedit", and then expand HKEY in turn_ LOCAL_ Machine \ software \ Microsoft \ windows \ current version \ run primary key, and then set the registry under it Delete the EXE subkey, and then delete the self running program C: \ program files \ registry Exe, and finally reset the start page from the IE option.
In addition to the above situation, even if "use default page" is set after the start page of some ie is changed, it is still invalid, because the default page of IE start page has also been tampered with. In this case, we can also solve it by modifying the registry. Run "regedit" to expand HKEY_ LOCAL_ MACHINE\Software\Microsoft\Internet Explorer\Main\Default_ Page_ URL subkey, and then change the URL of the tampered website in the key value of "default_page_ur" subkey, or set it as the default value of IE.
Although the method of modifying the registry is very effective, it is more professional for ordinary computer users, and more English is involved in the editing process. Therefore, here we introduce you to use some special repair tools.
Generally speaking, there are two categories of IE repair tools. First, auxiliary tools provided by commercial institutions, such as rising registry repair tool, ie repair expert attached to 3721 Internet assistant, ie repair tool in super rabbit, etc. most of these software are bundled with commercial software or tool software, and some of them need to be paid to use. It is characterized by powerful functions and is recommended for users with strong economic strength.
Among them, Ruixing's registry repair tool can be downloaded separately for free, especially recommended for everyone. Its download website is http://it.rising.com.cn/service/technology/RegClean_download.htm 。 Refer to the help files of these software for specific use methods.
Another kind of IE repair software is mainly written by netizens with strong technical strength. Its use effect is similar to rising, ie repair experts, super rabbit, etc., but you need to search and download it yourself.
Why is the browser home page tampered with
Reason 1: tampering with the home page with rootkit
Using the above method to eliminate rogue websites, you can now feel comfortable. But you may be very curious, why do we use such a complex method to eliminate rogue websites? Why does simply repairing Internet properties fail? This has to mention the rootkit technology used by rogue websites.
Little knowledge: the operating system is composed of a kernel and a shell. The kernel runs at the ring 0 level and has the most complete and lowest management functions. At the ring 0 level are the system core modules and various driver modules. Almost all instructions are passed to the kernel, which decides whether to execute. Once an instruction that may cause damage to the system is found, the kernel will return a "illegal ultra vires" flag, and the program sending this instruction may be terminated.
Using rootkit technology, rogue websites can have the same running level as the kernel and enter the kernel space. In this way, they have the same access rights as the kernel and can modify the kernel instructions. So when you use a single repair tool to repair the browser home page, the instruction will be intercepted and tampered by rogue websites using rootkit technology when entering the system kernel. In this way, the instruction will lose its function and the repair tool will not work. 9348 and ku530 are representatives of using this technology.
Reason 2: take the binding route
Why do some rogue websites frequently tamper with the home page and appear soon after cleaning, which is always unclean? This is because, in addition to using rootkit technology to protect themselves, rogue websites also have a way to occupy the browser home page, that is, binding. They are activated when a program is running, and they tamper with the home page. The disadvantage of this method is that it is easy to repair, and the advantage is that it cannot be completely repaired.
Most of the programs that bind rogue websites are often used, such as various plug-ins, patching, game clients, etc. For example, you download a game plug-in at a software download station. When you run the game plug-in, the rogue website embedded in the game plug-in will judge the browser home page. If the home page is not your own, you will tamper with it, and if it is your own, you will skip it.
In addition to common programs, rogue websites will also be bundled with other things, such as operating system (114la, Tomatolei) and optimization software (930930). What's more funny is that some so-called ie protection tools themselves will also tamper with the home page.
The home page function of web browser is to automatically open the page set as the home page when running the browser program. This function is convenient for users to access their favorite and frequently browsed web pages. We can set the home page address link through the "Internet Options" of IE browser. In order to advertise themselves, increase traffic and use bad code, many websites have modified the IE browser home page without the user's permission, and users are not allowed to change the tampered home page. I have encountered two cases of malicious modification of IE browser home page without allowing users to modify it. Let me share my solutions with you.
The first case: the IE browser home page is tampered with. It can be recovered by modifying the relevant values in the registry. However, after restarting or logging off, the system will run again, and the IE browser home page will be changed again.
Directly through "Internet Options" or modify the values of "default_page_url" and "start page" under [hkey_local_machine \ software \ Microsoft \ Internet Explorer \ main] and [hkey_current_user \ software \ Microsoft \ Internet Explorer \ main] in the registry http://www.uxwell.com/allmovie.html , modify the IE home page, but when you turn off IE and run ie again, you still can't modify it. When I right-click the internet explorer Icon on the desktop, open the shortcut menu, and click the "properties" command, I find that this is a shortcut to IE browser. There is a parameter after the command, which is the website address set as the home page.
What if IE browser is maliciously tampered with
（1） The default home page has been modified
Clearing method: manually modify the registry, start menu - > Run - > regedit - > OK, open the registry editing tool, and open it in sequence: HKEY_ LOCAL_ Usersoftwaremicrosoft Internet explorermain branch, find default_ Page_ URL key name (used to set the default home page). Right click in the right window to modify it. Press F5 to refresh and take effect.
（2） The default home page is modified
Clearing method: manually modify the registry, start menu - > Run - > regedit - > OK, open the registry editing tool, and open it in the following order: HKEY_ LOCAL_ User software Microsoft Internet Explorer main branch, find the startpage key value name (used to set the default home page), and right-click in the right window to modify it. Press F5 to refresh and take effect.
（3） The default Microsoft home page has been modified
Clearing methods: (1) manually modify the registry: Start Menu - > Run - > regedit - > OK, open the registry editing tool, and open it in the following order: HKEY_ LOCAL_ Machinesoftware Microsoft Internet Explorer main branch, find default_ Page_ URL key value name (used to set the default Microsoft home page). Right click in the right window to modify the key value to. Press F5 to refresh and take effect.
(2) Automatic file import registry method: Please enter or paste the following contents into Notepad, store any file name with the extension of reg in any directory of Disk C, and then execute this file. According to the prompt, confirm all the way, and then the successful import Registry will be displayed.
REGEDIT4
[HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMain]
（4） The home page setting is blocked and locked, and the setting options are invalid and cannot be changed
Clearing methods: (1) manually modify the registry: Start Menu - > Run - > regedit - > OK, open the registry editing tool, and open it in the following order: HKEY_ CURRENT_ User software Microsoft Internet Explorer branch, create a new "controlpanel" primary key, and then create a DWORD value named "homepage" under this primary key with the value of "00000000". Press F5 to refresh and take effect.
(2) Automatic file import registry method: Please enter or paste the following contents into Notepad, store any file name with the extension of reg in any directory of Disk C, and then execute this file. According to the prompt, confirm all the way, and then the successful import Registry will be displayed.
REGEDIT4
[HKEY_CURRENT_USERSoftwarePoliciesMicrosoftInternet ExplorerControl Panel]
“HomePage”=dword：00000000
How to do when the browser home page is modified related articles:
1. How to solve the problem that the QQ browser home page cannot be modified
2. What if ie cannot modify the home page
3.360 browser can not open Baidu home page how to do
4. How to set the IE tab home page
5. Solutions to incomplete web page display