Browser Hijacking: Difference between revisions
Jump to navigation
Jump to search
m (→參考) |
(→事後補救: add mysearchnow.com) |
||
| Line 10: | Line 10: | ||
=== 事後補救 === | === 事後補救 === | ||
* 有''良心''的網站提供的工具 ex: [http://www.lop.com/help.html#uninstall lop.com] | * 有''良心''的網站提供的工具 ex: [http://www.lop.com/help.html#uninstall lop.com], [http://mysearchnow.com/help.html#uninstall mysearchnow.com](search web) | ||
* [http://www.superrsoft.com/ 超級兔子魔法]設定 (shareware) | * [http://www.superrsoft.com/ 超級兔子魔法]設定 (shareware) | ||
* [http://www.lavasoftusa.com/software/adaware/ Ad-Aware](with its [http://www.lavasoftnews.com/ms/tac_main.htm Threat Assessment Chart] - TAC) 與 [http://www.safer-networking.org Spybot-Search & Destroy] ... | * [http://www.lavasoftusa.com/software/adaware/ Ad-Aware](with its [http://www.lavasoftnews.com/ms/tac_main.htm Threat Assessment Chart] - TAC) 與 [http://www.safer-networking.org Spybot-Search & Destroy] ... | ||
Revision as of 20:34, 18 September 2004
電腦急救 - 網頁/瀏覽器被綁架，反制惡劣的網站
症狀
- 出現不明的搜尋頁面/搜尋工具列
- 網路連線速度變慢
解決方法
事後補救
- 有良心的網站提供的工具 ex: lop.com, mysearchnow.com(search web)
- 超級兔子魔法設定 (shareware)
- Ad-Aware(with its Threat Assessment Chart - TAC) 與 Spybot-Search & Destroy ...
- 修改 Windows Registry 登錄碼 (cmd -> regedit -> 登錄編輯器)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\Run 每次開機, 首頁被修改? HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL 使用預設的首頁設定無效 HKEY_USERS\Software\Policies\Microsoft\Internet Explorer\Control Panel 首頁被鎖死 HKEY_CURRENT_USERS\Software\Policies\Microsoft\Internet Explorer\Control Panel 暫存檔按鈕無法按 ---- HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\ Window Title HKEY_CURRENT_USERS\Software\Microsoft\Internet Explorer\Main Window Title 標題列加上廣告文字 ---- HKEY_CURRENT_USERS\Software\Microsoft\Internet Explorer\MenuExt 按右鍵的 IE 浮動功能表 ---- HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search 搜尋引擎 ----
- 無法進入編輯器
- Windows 95/98/Me
REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools" =dword"00000000
- Windows 2000/XP
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools" =dword"00000000
儲存為 .reg格式
事前預防
- 調整 IE 安全等級
- 下載 Microsoft Windows Script 5.6
- 停用 Remote Registry Service
- 將廣告視窗加入黑名單
參考
- NoMo: 解決所有網頁被綁架的終極完整法
- PC Office No.82 http://www.pchome.com.tw