Problem solve Get help with specific problems with your technologies, process and projects.

Hijacked browser

An ITKnowledge Exchange member had a browser hijacking. Find out what other members offered for advice.

Q: From bugwit, "Somehow I've managed to have my browser (IE v6.0.2800.1106) hijacked. Every time I reboot my computer, my homepage and search page are reset. I've used Spybot-Search & Destroy to find the problems, and it does remove them, but every time I reboot my pages are changed again. How can I fix this without having to buy something to take care of it?"

A: From CasinoAdmin, "There are many anti-spyware programs out there that can solve your problem. I've actually just tried out the new Microsoft beta called Microsoft Windows Antispyware (Beta). The beta is free and allows you to set what the home page, search page and other Internet settings should be set back to if it finds a hijacking. You can download it on the Microsoft Web site."

A: From bobkberg, "Get a copy of HijackThis.exe -- it's free on many sites (like This is one of those stealth apps that re-installs itself, so you need make sure everything is clean. Just make sure you know what you're doing. HijackThis is a powerful tool, which will also allow you to shoot yourself in the foot."

A: From sexton, "Although the other suggested solutions may work (I've never used either product), Spybot has the tool set required to clear up your issue. The default installation, which most people do, is not enough to "protect" your computer. In fact, currently no single product is enough to protect from this fast growing trend of spy / malware. However, in your case, Spybot can do the job just fine and should clean up your browser hijack issue. Spybot is a freeware program, and if used properly, does a good job. However, I still find other anti-spyware programs are needed for maximum protection. To keep the author of Spybot producing signature files, you should make a donation. I don't know the author, but like the program and wish for more frequent updates."

A: From Dad1989, "I concur with the previous replies. I will note that Spybot has saved me a number of times. At home I have switched to Firefox for additional vulnerability avoidance. At work I cannot completely switch yet because internal applications are not compatible with Firefox. Another useful tool is BHODEMON. This plugs into your MSIE and provides additional protection against Browser Helper Objects (BHOs). Malicious BHOs could have a part in some hijacking cases, although I could not say that is the case with yours. Check out more about it at: This tool saved me once recently. I will reiterate the notes written earlier about being careful with the tools mentioned, as they are quite powerful."

This question and answer thread was originally posted in the ITKnowledge Exchange forum.

Join your peers today and start receiving valuable answers to your toughest information security questions. Or network with your peers to exchange technical advice and strategic ideas on security topics. Visit the ITKnowledge Exchange.


This was last published in February 2005

Dig Deeper on Web browser security

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.