这个网页应该是通过程序修改了系统lnk文件达到劫持浏览器的目的。更改方法如下:
先打开记事本,输入以下内容,保存为"lnk .reg"文件,再双击导入注册表。(下面代码只需复制后存为REG格式文件即可)
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT/.lnk]
@="lnkfile"
[HKEY_CLASSES_ROOT/.lnk/ShellEx]
[HKEY_CLASSES_ROOT/.lnk/ShellEx/{000214EE-0000-0000-C000-000000000046}]
@="{00021401-0000-0000-C000-000000000046}"
[HKEY_CLASSES_ROOT/.lnk/ShellEx/{000214F9-0000-0000-C000-000000000046}]
@="{00021401-0000-0000-C000-000000000046}"
[HKEY_CLASSES_ROOT/.lnk/ShellEx/{00021500-0000-0000-C000-000000000046}]
@="{00021401-0000-0000-C000-000000000046}"
[HKEY_CLASSES_ROOT/.lnk/ShellEx/{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}]
@="{00021401-0000-0000-C000-000000000046}"
[HKEY_CLASSES_ROOT/.lnk/ShellNew]
"Command"="rundll32.exe appwiz.cpl,NewLinkHere %1"
[HKEY_CLASSES_ROOT/lnkfile]
@="快捷方式"
"EditFlags"=dword:00000001
"IsShortcut"=""
"NeverShowExt"=""
[HKEY_CLASSES_ROOT/lnkfile/CLSID]
@="{00021401-0000-0000-C000-000000000046}"
[HKEY_CLASSES_ROOT/lnkfile/shellex]
[HKEY_CLASSES_ROOT/lnkfile/shellex/ContextMenuHandlers]
[HKEY_CLASSES_ROOT/lnkfile/shellex/ContextMenuHandlers/Offline Files]
@="{750fdf0e-2a26-11d1-a3ea-080036587f03}"
[HKEY_CLASSES_ROOT/lnkfile/shellex/ContextMenuHandlers/{00021401-0000-0000-C000-000000000046}]
[HKEY_CLASSES_ROOT/lnkfile/shellex/DropHandler]
@="{00021401-0000-0000-C000-000000000046}"
[HKEY_CLASSES_ROOT/lnkfile/shellex/IconHandler]
@="{00021401-0000-0000-C000-000000000046}"
[HKEY_CLASSES_ROOT/lnkfile/shellex/PropertySheetHandlers]
[HKEY_CLASSES_ROOT/lnkfile/shellex/PropertySheetHandlers/ShimLayer Property Page]
@="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"