GOOGLE不定時被綁架.......(XXX-SEARCH.XXX)

Cancer

之前在找資料的時候可能不小心手賤去按到確定
結果變成只要用GOOGLE找資料
出來的網頁一樣是GOOGLE
但是總會有幾個網址的連結點下去會連到一個"81.211.105.69"開頭的搜尋引擎
裡面都是一堆垃圾
每次出現的時機跟順序都不一定
同一個搜尋頁面有時候多按幾次重新整理，被綁架的網址就會正常
但是又去綁架其它連結B)

後來在GOOGLE上面查了一下該網址的相關資訊
找到一篇文章
這個網址開頭有一系列的網站
我這種症頭算是最輕微的
只是無定向的連結會被綁架
嚴重的大概會有開機出現訊息、首頁、搜尋頁面被綁架等等的問題

解決方法如下
(轉載自http://forum.gladiator-antivirus.com/index.php?showtopic=11932)

First copy this and close out IE. Delete in \system32\ the files xplugin.dll, tmksrvu.exe and tksrv98.exe (IE being closed, if you can't delete xplugin.dll, cut and paste somewhere else and then delete)

Open registry, do find and delete all "hot-searches.com" and "lender-search.com" keys (that I found were in folders located UNDER Explorer Bars or a similar name for toolbars), delete the folders there.

Also using "hot-searches.com" and "lender-search.com", find, open and rename strings under Internet Explorer (rename these to your favoite hompage, search page, etc).

Do the same with finding and deleting all "81.211.105.69" and "81.211.105.68" (last one not found for me) keys.

首先，將這段文字複製下來並且關閉你的瀏覽器
刪除SYSTEM32目錄中的xplugin.dll ， tmksrvu.exe 和 tksrv98.exe這三支檔案
如果無法刪除xplugin.dll，請將該檔案剪下至別處貼上然後刪除之

開啟REGEDITOR(開始->執行->REGEDIT->ENTER)
搜尋"-searches"、"81.211.105.68"和"81.211.105.69"的機碼(將完全符合字串的勾取消掉)
將找到的機碼通通刪除
就可以了
(改成-SEARCHS的目的是因為有時候會出現GET-SEARCH.CC這樣的網址，所以將條件減少，避免漏砍)