Home Page Hijacking...A Tutorial

[Ludedude]

OK, this isn't a tutorial on how to hijakc a page, but rather points to some information about recovering from such an attack...but maybe my subject will win me a DVD?

This is from an email newsletter I get, by the way. I have no idea if I have permission to publish it, but given the nature of the discussions around here lately, fuck it...it's good info.

<begin include>
There are different kinds of home-page hijacking. The simplest kind is
correctable by using your browser's Home Page tool. In recent versions
of IE, it's Tools/Internet options/Home Page. In recent Netscape
browsers, Edit/Preferences/Navigator/Home Page. (Other browsers/versions
may differ, but you get the idea.)

Or, you can put a small Reg tool on your desktop, such as the one here: http://www.langa.com/newsletters/2000/2000-07-10.htm#2 . One click of
that tool will restore your home page to whatever you want, after it's
been hijacked.

But there are more malicious ways to hijack a page, such as the one used
by "PassThisOn." Pages like that actively re-set your home page even if
you change it to something else, and take more work to disable. But even
with those, there's help: http://www.langa.com/newsletters/2001/2001-06-07.htm#6

[ezekiel]

I recently got a malicious "something" on my comp that was running scripts to change my prefrences, Such as Search Page, StartPage, and adding links to my favorites. The file was called sb.hta and to fix it I had to go edit my autoexe.bat file and place this code into it.

@ECHO Y| ATTRIB -H -S -R C:\WINDOWS\STARTM~1\PROGRAMS\STARTUP\*.*

@ECHO Y| DEL C:\WINDOWS\STARTM~1\PROGRAMS\STARTUP\*.HTA


It seems to be working very well.

[jimmyf]

I believe thehun has something on how to fix your comput if someone changes your home page. He's even got the diff. screens.

Jim