SoFunction
Updated on 2025-04-09

IE: Thirteen simple ways to deal with malicious modifications

1. Web page viruses that damage IE browser:

(I). The default homepage is modified

1. Destructive features: The default homepage is automatically changed to the URL of a certain website.

2. Expression form: The default home page of the browser is automatically set to the URL such as *********.COM.

3. Clear method: Use the manual registry modification method, Start menu -> Run -> regedit -> OK, open the registry editing tool, open the HKEY_LOCAL_USERSoftwareMicrosoft Internet ExplorerMain branch, find the Default_Page_URL key value name (used to set the default homepage), and right-click in the right window to modify it. Press F5 to refresh and take effect.

Hazard degree: General

(II). The default homepage is modified

1. Destructive features: The default homepage is automatically changed to the URL of a certain website.

2. Expression form: The default home page of the browser is automatically set to the URL such as *********.COM.

3. Clear method: Use the manual registry modification method, Start menu -> Run -> regedit -> OK, open the registry editing tool, open it in the following order: HKEY_LOCAL_USERSoftwareMicrosoft Internet ExplorerMain branch, find the StartPage key value name (used to set the default homepage), and right-click in the right window to modify it. Press F5 to refresh and take effect.

Hazard degree: General

(III). The default Microsoft homepage has been modified

1. Destructive features: The default Microsoft homepage is automatically changed to the URL of a certain website.

2. Expression form: The default Microsoft homepage is tampered with.

3. Clear method:

(1) Manually modify the registry method: Start menu -> Run -> regedit -> OK, open the registry editing tool, open it in the following order: HKEY_LOCAL_MACHINESoftwareMicrosoft Internet ExplorerMain Branch, find the Default_Page_URL key value name (used to set the default Microsoft homepage), right-click in the right window, and change the key value to /windows/ie_intl/cn/start/. Press F5 to refresh and take effect.

(2) Automatic file import registry method: Please enter or paste the following content into Notepad, and store any file name with the extension reg in any directory on the C drive, and then execute this file. According to the prompts, confirm all the way to display the successful import of the registry.

REGEDIT4

[HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMain]
"default_page_url"="/windows/ie_intl/cn/start/"

Hazard degree: General

(IV). The home page settings are blocked and locked, and the settings options are invalid and cannot be changed.

1. Destroy the feature: Home page settings are disabled.

2. Expression form: The home page address bar turns gray and is blocked.
 
3. Clear method: (1) Manually modify the registry method: Start menu -> Run -> regedit -> OK, open the registry editing tool, open it in the following order: HKEY_CURRENT_USERSoftwareMicrosoft Internet Explorer branch, create a new "ControlPanel" primary key, and then create a new DWORD value with the key value named "HomePage" under this primary key, and the value is "000000000", press F5 to refresh and take effect.

(2) Automatic file import registry method: Please enter or paste the following content into Notepad, and store any file name with the extension reg in any directory on the C drive, and then execute this file. According to the prompts, confirm all the way to display the successful import of the registry.

REGEDIT4

[HKEY_CURRENT_USERSoftwarePoliciesMicrosoftInternet ExplorerControl Panel]
"HomePage"=dword:00000000

Harm degree: mild

(V) The default IE search engine is modified

1. Breaking features: Change IE's default Microsoft search engine.

2. Expression form: Search engines are tampered with.

3. Clear method: (1) Manually modify the registry method: Start menu -> Run -> regedit -> OK, open the registry editing tool, first, open it in the following order: HKEY_LOCAL_MACHINESoftwareMicrosoft Internet ExplorerSearch branch, find the "SearchAssistant" key value name, click "Modify" in the right window, and enter its key value as: /{SUB_RFC1766}/srchasst/, and then find the "CustomizeSearch" key value name, modify its key value to: /{SUB_RFC1766}/srchasst/, and press the F5 key to refresh and take effect.

(2) Automatic file import registry method: Please enter or paste the following content into Notepad, and store any file name with the extension reg in any directory on the C drive, and then execute this file. According to the prompts, confirm all the way to display the successful import of the registry.

REGEDIT4

[HKEY_LOCAL_MACHINESoftwareMicrosoftInternetExplorerSearch]
"SearchAssistant"="/{SUB_RFC1766}/srchasst/"
"CustomizeSearch"="/{SUB_RFC1766}/srchasst/"

Hazard degree: General



(VI).Illegal information was added to the IE title bar

1. Destructive features: By modifying the registry, the IE title bar is forcibly added to promote the advertising information of the website.

2. Expression form: What is more "Zhengdian.com, even Zhengdian.com" on the blue title bar at the top of IE!

3. Clear method: (1) Manually modify the registry method: Start menu -> Run -> regedit -> OK, open the registry editing tool, first, open it in the following order: HKEY_CURRENT_USERSoftwareMicrosoft Internet ExplorerMain branch, find the "Window Title" key value name, enter the key value as Microsoft Internet Explorer, press F5 to refresh.

Second, open it in the following order: HKEY_CURRENT_MACHINESoftwareMicrosoft Internet ExplorerMain branch, find the "Window Title" key value name, enter the key value as Microsoft Internet Explorer, press F5 to refresh and take effect.

(2) Automatic file import registry method: Please enter or paste the following content into Notepad, and store any file name with the extension reg in any directory on the C drive, and then execute this file. According to the prompts, confirm all the way to display the successful import of the registry.

REGEDIT4

[HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain]
"Window Title"="Microsoft Internet Explorer"

[HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMain]
"Window Title"="Microsoft Internet Explorer"

Hazard degree: General

(VII). The OE title bar has been added with illegal information to destroy features:

Destroy features: by modifying the registry, add advertising information to promote the website in the title bar at the top of Microsoft Outlook, Microsoft's integrated email program]
Expression: Add illegal information to the blue title bar of Outlook Express at the top.

Clear method: (1) Manually modify the registry method: Start menu -> Run -> regedit -> OK, open the registry editing tool, open it in the following order: HKEY_LOCAL_USERSoftwareMicrosoft Outlook Express branch, find the WindowTitle and Store Root key value names, and set their key values ​​to empty. Press F5 to refresh and take effect.

(2) Automatic file import registry method: Please enter or paste the following content into Notepad, and store any file name with the extension reg in any directory on the C drive, and then execute this file. According to the prompts, confirm all the way to display the successful import of the registry.

REGEDIT4

[HKEY_CURRENT_USERSoftwareMicrosoftOutlook Express]
"WindowTitle"=""
"Store Root"=""

Hazard degree: General

(8). The right mouse button menu has been added to the illegal website link:

1. Destroy features: By modifying the registry, links to illegal sites are added to the right-click pop-up menu.

2. Expression form: add link information such as "Website Home".

3. Clear method: (1) Manually modify the registry method: Start menu -> Run -> regedit -> OK, open the registry editing tool, and open it in the following order: HKEY_CURRENT_USERSoftwarePoliciesMicrosoft Internet ExplorerMenuExt branch. In the left window, all primary keys that belong to illegal links are deleted. Press F5 to refresh and take effect.

4. The degree of hazard: general

(9). The right mouse button pop-up menu function is disabled and is incorrect:

1. Destroy features: By modifying the registry, the right mouse button pop-up menu function is completely prohibited in IE browser.

2. Expression form: Right-click in IE and no response.

3. Clear method: (1) Manually modify the registry method: Start menu -> Run -> regedit -> OK, open the registry editing tool, open it in the following order: HKEY_CURRENT_USERSoftwarePoliciesMicrosoft Internet ExplorerRestrictions branch, find the "NoBrowserContextMenu" key value name, set its key value to "00000000", press F5 key to refresh and take effect.

(2) Automatic file import registry method: Please enter or paste the following content into Notepad, and store any file name with the extension reg in any directory on the C drive, and then execute this file. According to the prompts, confirm all the way to display the successful import of the registry.

REGEDIT4

[HKEY_CURRENT_USERSoftwarePoliciesMicrosoftInternet ExplorerRestrictions]
"NoBrowserContextMenu"=dword:00000000

Harm degree: mild

(10).IE favorites were forcibly added to the address link of the illegal website.

Destructive features: By modifying the registry, link information of illegal websites is automatically added to the IE favorites.

Expression form: Hiding under favorites.

Clear method: Please clear it manually, right-click to move to the illegal website information, right-click to pop up the menu, and select Delete.

Hazard degree: General



(11). Illegal addition of buttons in the IE toolbar

Destroy feature: Add an illegal button in the toolbar.

Expression form: with button icon.

Clear method: Just right-click the menu to pop up and select "Delete".

Hazard degree: General

(12). Lock the drop-down menu of the address bar and its added text information

Destroy feature: By modifying the registry, the drop-down menu in the address bar is locked to gray.

Expression form: not only makes the drop-down menu disappear, but also overwrites illegal text information on it.

Clear method: (1) Manually modify the registry method: Start menu -> Run -> regedit -> OK, open the registry editing tool, open it in the following order: HKEY_CURRENT_USERSoftwarePoliciesMicrosoft Internet ExplorerToolbar branch, find the "LinksFolderName" key value name in the right window, set its key value to "link", remove all the extra characters, press F5 to refresh and take effect.

Harm degree: mild

(13). The "Source File" item under "View" of the IE menu is disabled

Destroy feature: By modifying the registry, the "Source File" item under "View" in the IE menu will be locked to gray.

Expression: The "Source File" item is not available.

Clear method: (1) Manually modify the registry method: Start menu -> Run -> regedit -> OK, open the registry editing tool, first, open it in the following order: HKEY_CURRENT_USERSoftwarePoliciesMicrosoft Internet ExplorerRestrictions branch, find the "NoViewSource" key value name, set its key value to "00000000", press F5 key to refresh and take effect.

Open in the following order: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoft Internet ExplorerRestrictions branch, find the "NoViewSource" key value name, set its key value to "00000000", and press F5 key to refresh and take effect.

(2) Automatic file import registry method: Please enter or paste the following content into Notepad, and store any file name with the extension reg in any directory on the C drive, and then execute this file. According to the prompts, confirm all the way to display the successful import of the registry.

REGEDIT4

[HKEY_CURRENT_USERSoftwarePoliciesMicrosoftInternet ExplorerRestrictions]
"NoViewSource"=dword:00000000

[HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftInternet ExplorerRestrictions]
"NoViewSource"=dword:00000000

Harm degree: mild