Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

How to Recover From Internet Explorer Hijacking


  • This topic is locked This topic is locked
33 replies to this topic

#1 harrywaldron

harrywaldron

    Security Reporter


  •  Avatar image
  • Members
  • 509 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Roanoke, Virginia
  • Local time:01:01 AM

Posted 11 July 2004 - 08:20 AM

Posted Image

The article below shares tips on repairing IE if the browser has been hijacked (a term meaning that the user can no longer control the home page or aggressive pop-up activity).

How to Recover from an Internet Explorer hijacking
http://techrepublic.com.com/5100-6270_11-5034307.html

The key recommended steps are in this order (where you would take the “next step“ if a cleaning process still doesn't correct the underlying issues).

1. AntiVirus Cleaning -- Update your AV product to the latest scanning engine and virus definitions. Scan your entire hard drive and remove items with your AV product or free cleaning tools available at many sites.

2. AdAware and SpyBot Search & Destroy -- Both of these free cleaning tools are excellent. Use Google to find sites where you can download each product and update them to the latest available definitions each time you run.

3. CWS Shredder, HijackThis, and Filemon/Regmon Analysis -- This next step requires a lot of technical expertise as Windows file and registry activity must be carefully analyzed.

Dutch security expert Merjin has developed some great tools
http://www.spywareinfo.com/~merijn/
http://www.google.com/search?&q=merjin

I'm impressed with the security expertise of several moderators who analyze and share findings on how to correct IE hijacking issues.

Bleeping Comuters - see HighjackThis Log Analysis forum
http://www.bleepingcomputer.com/forums/index.php

Sysinternals - Regmon / Filemon (monitors registry/file activity)
http://www.sysinternals.com/

4. Reinstallation of Internet Explorer -- As a last resort sometimes IE or even Windows itself will require reinstallation. Always remember to apply critical patches before reconnecting to the Internet. Then immediately perform a Windows Update to better protect your newly reinstalled environment.

How to repair or reinstall Internet Explorer if needed
http://support.microsoft.com/default.aspx?...kb;en-us;318378

BC AdBot (Login to Remove)

 


#2 vplumme

vplumme

  •  Avatar image
  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:01 PM

Posted 18 March 2010 - 01:24 PM

This Anti - Soft virus can be a pain in the rear. It will always start with your computer once your begin to open your internet browser or when your system starts up.

1)Boot to Safe Mode
2)Look for the folders under Administrator\Local Settings\Application Data and delete folders that doesn't look right. The executables are in those folders.
3)Open up your registry. Export your registry and save it with a date like (31810) in a new folder under My documents called Registry
4)The key values will then need to be deleted under HKCU\HKLM SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUN
5)Close your registry and reboot your machine.
6)Update your virus software or get one and install it.
:thumbsup:

#3 Tendoncs

Tendoncs

  •  Avatar image
  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:north CA
  • Local time:12:01 AM

Posted 18 July 2011 - 04:40 PM

After cleaning the system and removing the core infections a lot of the time resetting the settings in IE will help a TON.

tools > Internet options > advanced and reset.

#4 wjames811

wjames811

  •  Avatar image
  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:12:01 AM

Posted 06 February 2012 - 12:43 AM

What is the problem when i install avast antivirus, Before that i install bit defender, But i uninstall fully then also avast cant install..

#5 sumeshnandha

sumeshnandha

  •  Avatar image
  • Members
  • 2 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:31 AM

Posted 23 February 2012 - 12:36 AM

yeah nowadays we see a lot of hijacking issues

#6 Yiddish

Yiddish

  •  Avatar image
  • Banned Spammer
  • Member rank image
  • 48 posts
  • OFFLINE
  •  
  • Local time:12:01 AM

Posted 13 March 2012 - 11:19 PM

I read the below tips in one article hope this could be helpful.


EDIT: to delete copy and paste content from very first link in original topic, which is copyright infringement.

http://www.techrepublic.com/article/recover-from-an-internet-explorer-hijacking-with-these-tips/5034307

Please adhere to the fair use guidelines when using content from other sites. http://www.bleepingcomputer.com/forums/topic272811.html

Edited by Animal, 14 March 2012 - 04:35 PM.
Content editied to avoid copyright infringement


#7 quietman7

quietman7

    Bleepin' Gumshoe


  •  Avatar image
  • Global Moderator
  • 62,051 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:01:01 AM

Posted 29 October 2013 - 08:24 PM

This topic is a few years old so I am providing a link with more current information.

About those Toolbars and Add-ons which change your browser settings

.
.
Microsoft MVP Alumni 2023Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023

Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif


#8 4dude

4dude

  •  Avatar image
  • Members
  • 578 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:01 AM

Posted 13 November 2013 - 03:56 AM

A very good thread!!!

I hope no one ever needs these tips!! (Quite sad how ppl try to hurt people!!)

#9 quietman7

quietman7

    Bleepin' Gumshoe


  •  Avatar image
  • Global Moderator
  • 62,051 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:01:01 AM

Posted 13 November 2013 - 08:55 AM

Unfortunately a lot of folks need these tips...that's why we provide them.

.
.
Microsoft MVP Alumni 2023Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023

Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif


#10 gingersitka

gingersitka

  •  Avatar image
  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:09:01 PM

Posted 29 April 2014 - 03:29 AM

If you notice a new program installed or toolbar findout more about it by searching it. If it is a bad program like  "search protect" by conduit.  I have had this program unintentially installed on my laptop 2-3 times. It is a browser hijacker, and is a nasty undesirable program installed as a tag-on program when installing other freeware. Lavasoft and others have developed removal procedures for such PUP's.
 
A quick way in to determine if anything has been installed in your Internet Explorer is to go to tools>Manage addons>Toolbars and Extensions, or Search providers
Look down the list for any suspicious or unrecongnized search engines, or toolbars. If you don't know look it up, if it is undesirable you usually get at list of websites telling you removal procedures, or got to a reputable forum and ask for help "BLEEPING COMPUTER".

#11 mikejohnlen

mikejohnlen

  •  Avatar image
  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:01 PM

Posted 24 June 2015 - 01:53 AM

  1. Press “Ctrl-Alt-Del,” select “Task Manager” and click the “Processes” tab.
  2. Find “iexplore.exe” in the running processes list and click on it.
  3. Click the “End Process” button.
  4. Click "Start," type “inetcpl.cpl” in the Search box, and press “Enter” to bring up Internet Properties
  5. Click the “Delete . . . “ button under Browsing History
  6. Click the “Privacy” tab in Internet Properties, make sure “Turn on Pop-up Blocker” is checked and click “Apply.” 
  7. Click the “General” tab, and check the Web address listed in the Home Page section
  8. Launch your anti-virus program
  9. Update your anti-virus program’s security definitions, run a full scan, and remove any items found.


#12 quietman7

quietman7

    Bleepin' Gumshoe


  •  Avatar image
  • Global Moderator
  • 62,051 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:01:01 AM

Posted 28 June 2015 - 05:44 PM

Unfortunately, the above steps are not sufficient for removing browser hijackers.

.
.
Microsoft MVP Alumni 2023Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023

Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif


#13 wefixtexas

wefixtexas

  •  Avatar image
  • Banned Spammer
  • Member rank image
  • 2 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:31 AM

Posted 11 August 2015 - 04:36 PM

very nyc and informative article ...

@Harry

Thanks and regards



#14 quietman7

quietman7

    Bleepin' Gumshoe


  •  Avatar image
  • Global Moderator
  • 62,051 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:01:01 AM

Posted 11 August 2015 - 04:49 PM

Our friend Harry hasn't been around in a few years so I'd like to say you're welcome on behalf of him.

.
.
Microsoft MVP Alumni 2023Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023

Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif


#15 isaccasi

isaccasi

  •  Avatar image
  • Members
  • 273 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:zealand denmark
  • Local time:07:01 AM

Posted 14 November 2016 - 02:49 PM

Hello sorry for interrupting but Hitmanpro is good when it comes to hijackers :notme:


Enough Is Enough. :guitar:





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users