Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Latest News: Google Chrome to let Isolated Web App access sensitive USB devices

Featured Deal: Block malvertising with $60 off AdGuard ad blocker

Latest Buyer's Guide: Best web browsers with built in VPN: Boost online privacy

How to Recover From Internet Explorer Hijacking

Started by harrywaldron , Jul 11 2004 08:20 AM

Next

This topic is locked

33 replies to this topic

#1 harrywaldron

Security Reporter

Members
509 posts
OFFLINE

Gender:Male
Location:Roanoke, Virginia
Local time:01:01 AM

Posted 11 July 2004 - 08:20 AM

The article below shares tips on repairing IE if the browser has been hijacked (a term meaning that the user can no longer control the home page or aggressive pop-up activity).

How to Recover from an Internet Explorer hijacking
http://techrepublic.com.com/5100-6270_11-5034307.html

The key recommended steps are in this order (where you would take the “next step“ if a cleaning process still doesn't correct the underlying issues).

1. AntiVirus Cleaning -- Update your AV product to the latest scanning engine and virus definitions. Scan your entire hard drive and remove items with your AV product or free cleaning tools available at many sites.

2. AdAware and SpyBot Search & Destroy -- Both of these free cleaning tools are excellent. Use Google to find sites where you can download each product and update them to the latest available definitions each time you run.

3. CWS Shredder, HijackThis, and Filemon/Regmon Analysis -- This next step requires a lot of technical expertise as Windows file and registry activity must be carefully analyzed.

Dutch security expert Merjin has developed some great tools
http://www.spywareinfo.com/~merijn/
http://www.google.com/search?&q=merjin

I'm impressed with the security expertise of several moderators who analyze and share findings on how to correct IE hijacking issues.

Bleeping Comuters - see HighjackThis Log Analysis forum
http://www.bleepingcomputer.com/forums/index.php

Sysinternals - Regmon / Filemon (monitors registry/file activity)
http://www.sysinternals.com/

4. Reinstallation of Internet Explorer -- As a last resort sometimes IE or even Windows itself will require reinstallation. Always remember to apply critical patches before reconnecting to the Internet. Then immediately perform a Windows Update to better protect your newly reinstalled environment.

How to repair or reinstall Internet Explorer if needed
http://support.microsoft.com/default.aspx?...kb;en-us;318378

Microsoft Security Journal

Back to top

BC AdBot (Login to Remove)

BleepingComputer.com
Register to remove ads

#2 vplumme

Members
4 posts
OFFLINE

Local time:10:01 PM

Posted 18 March 2010 - 01:24 PM

This Anti - Soft virus can be a pain in the rear. It will always start with your computer once your begin to open your internet browser or when your system starts up.

1)Boot to Safe Mode
2)Look for the folders under Administrator\Local Settings\Application Data and delete folders that doesn't look right. The executables are in those folders.
3)Open up your registry. Export your registry and save it with a date like (31810) in a new folder under My documents called Registry
4)The key values will then need to be deleted under HKCU\HKLM SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUN
5)Close your registry and reboot your machine.
6)Update your virus software or get one and install it.
:thumbsup:

Back to top

#3 Tendoncs

Members
25 posts
OFFLINE

Gender:Male
Location:north CA
Local time:12:01 AM

Posted 18 July 2011 - 04:40 PM

After cleaning the system and removing the core infections a lot of the time resetting the settings in IE will help a TON.

tools > Internet options > advanced and reset.

Back to top

#4 wjames811

Members
16 posts
OFFLINE

Local time:12:01 AM

Posted 06 February 2012 - 12:43 AM

What is the problem when i install avast antivirus, Before that i install bit defender, But i uninstall fully then also avast cant install..

Back to top

#5 sumeshnandha

Members
2 posts
OFFLINE

Gender:Male
Local time:10:31 AM

Posted 23 February 2012 - 12:36 AM

yeah nowadays we see a lot of hijacking issues

Back to top

#6 Yiddish

Banned Spammer
48 posts
OFFLINE

Local time:12:01 AM

Posted 13 March 2012 - 11:19 PM

I read the below tips in one article hope this could be helpful.

EDIT: to delete copy and paste content from very first link in original topic, which is copyright infringement.

http://www.techrepublic.com/article/recover-from-an-internet-explorer-hijacking-with-these-tips/5034307

Please adhere to the fair use guidelines when using content from other sites. http://www.bleepingcomputer.com/forums/topic272811.html

Edited by Animal, 14 March 2012 - 04:35 PM.
Content editied to avoid copyright infringement

Back to top

#7 quietman7

Bleepin' Gumshoe

Global Moderator
62,051 posts
OFFLINE

Gender:Male
Location:Virginia, USA
Local time:01:01 AM

Posted 29 October 2013 - 08:24 PM

This topic is a few years old so I am providing a link with more current information.

About those Toolbars and Add-ons which change your browser settings

.
.
Microsoft MVP Alumni 2023, Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023

Microsoft MVP Consumer Security 2007-2015
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief

If I have been helpful & you'd like to consider a donation, click

Back to top

#8 4dude

Members
578 posts
OFFLINE

Gender:Male
Local time:12:01 AM

Posted 13 November 2013 - 03:56 AM

A very good thread!!!

I hope no one ever needs these tips!! (Quite sad how ppl try to hurt people!!)

Back to top

#9 quietman7

Bleepin' Gumshoe

Global Moderator
62,051 posts
OFFLINE

Gender:Male
Location:Virginia, USA
Local time:01:01 AM

Posted 13 November 2013 - 08:55 AM

Unfortunately a lot of folks need these tips...that's why we provide them.

.
.
Microsoft MVP Alumni 2023, Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023

Microsoft MVP Consumer Security 2007-2015
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief

If I have been helpful & you'd like to consider a donation, click

Back to top

#10 gingersitka

Members
12 posts
OFFLINE

Local time:09:01 PM

Posted 29 April 2014 - 03:29 AM

If you notice a new program installed or toolbar findout more about it by searching it. If it is a bad program like "search protect" by conduit. I have had this program unintentially installed on my laptop 2-3 times. It is a browser hijacker, and is a nasty undesirable program installed as a tag-on program when installing other freeware. Lavasoft and others have developed removal procedures for such PUP's.

A quick way in to determine if anything has been installed in your Internet Explorer is to go to tools>Manage addons>Toolbars and Extensions, or Search providers
Look down the list for any suspicious or unrecongnized search engines, or toolbars. If you don't know look it up, if it is undesirable you usually get at list of websites telling you removal procedures, or got to a reputable forum and ask for help "BLEEPING COMPUTER".

Back to top

#11 mikejohnlen

Members
9 posts
OFFLINE

Local time:10:01 PM

Posted 24 June 2015 - 01:53 AM

Press “Ctrl-Alt-Del,” select “Task Manager” and click the “Processes” tab.
Find “iexplore.exe” in the running processes list and click on it.
Click the “End Process” button.
Click "Start," type “inetcpl.cpl” in the Search box, and press “Enter” to bring up Internet Properties
Click the “Delete . . . “ button under Browsing History
Click the “Privacy” tab in Internet Properties, make sure “Turn on Pop-up Blocker” is checked and click “Apply.”
Click the “General” tab, and check the Web address listed in the Home Page section
Launch your anti-virus program
Update your anti-virus program’s security definitions, run a full scan, and remove any items found.

Back to top

#12 quietman7

Bleepin' Gumshoe

Global Moderator
62,051 posts
OFFLINE

Gender:Male
Location:Virginia, USA
Local time:01:01 AM

Posted 28 June 2015 - 05:44 PM

Unfortunately, the above steps are not sufficient for removing browser hijackers.

.
.
Microsoft MVP Alumni 2023, Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023

Microsoft MVP Consumer Security 2007-2015
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief

If I have been helpful & you'd like to consider a donation, click

Back to top

#13 wefixtexas

Banned Spammer
2 posts
OFFLINE

Gender:Male
Local time:10:31 AM

Posted 11 August 2015 - 04:36 PM

very nyc and informative article ...

@Harry

Thanks and regards

Back to top

#14 quietman7

Bleepin' Gumshoe

Global Moderator
62,051 posts
OFFLINE

Gender:Male
Location:Virginia, USA
Local time:01:01 AM

Posted 11 August 2015 - 04:49 PM

Our friend Harry hasn't been around in a few years so I'd like to say you're welcome on behalf of him.

.
.
Microsoft MVP Alumni 2023, Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023

Microsoft MVP Consumer Security 2007-2015
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief

If I have been helpful & you'd like to consider a donation, click