How to Fix a Browser Hijack on Internet Explorer

Authored by: Support.com Tech Pro Team

1. Introduction

Browser hijacking or 'pop-up phishing' involves fraudulent messages that unexpectedly pop up for users when they are surfing the web. In many cases, cyber criminals infect otherwise legitimate websites with malicious code that causes these messages to appear when people visit them.

The content of these messages themselves is what makes them so effective. Often, they present the unsuspecting website visitor with some kind of fraudulent warning from a well-known reputable company, typically about the security of their computer. Then they either prompt the visitor to download some tool to fix the problem, such as an antivirus application which turns out to be malware itself, or to call a fraudulent phone number for "support." The abnormal behavior of the message itself and the inability to close or navigate away from them, makes the fraudulent messages appear to be somewhat credible.

This guide will demonstrate how to rid yourself of the worrisome pop-up message, and then perform some simple operations to get Microsoft's Internet Explorer back to normal.

Tools You'll Need:

• A paperclip
• iPhone charging cable
• Access to a computer with iTunes installed
• Any other non-consumable tools needed
• Comment out tools section if no tools are necessary

-->

Supplies You'll Need:

• Zip ties
• Any other consumable supplies
• Comment out supplies section if no supplies are necessary

-->

Before You Begin:

• You must have access to a computer with iTunes installed.
• You must have that thing for the other thing so you can do the thing.

You must have this thing before you whatever.

• Title of GP User Should Do First
• Title of GP User Should Do First
• Each individual prereq should have its own box like this. Not all will contain multiple links.
• Comment out prerequisites section if no prereqs are necessary

-->

What About Pop-Ups?

This guide focuses on hijacked browsers. Pop-ups are another beast entirely and covered in another guide.

Preventing Pop-Ups in IE

• How to Stop Pop-Ups in Internet Explorer

2. Terminate Browser

The following steps can be used to terminate any browser, but the examples below will demonstrate using Internet Explorer.

1. Open the Windows Task Manager.
2. Using the Taskbar
3. Using your right mouse button, right-click on your Taskbar. Then select Task Manager from the menu.
   

2. Using a Keyboard Shortcut
3. On your keyboard use Ctrl+Shit+Esc.
   

2. Using the Lock Screen
3. You can do Ctrl+Alt+Del on your keyboard, then click on Task Manager.
   

1. Select your browser, then select End Task.
2. Basic View

1. Advanced View

When you next open your browser, if you are asked to restore a session, select No, or close the message.

3. Clear Cache and History

1. Open Internet Explorer.
   

1. Select the Gear icon in the top right corner, then select Internet options.
   

1. Under Browsing history, select Delete.
   

1. Go through the list of options here, to ensure the proper items are cleared.
   Once you have chosen your options, select Delete.
   

1. 
   SettingCheckboxPreserve Favorites website dataUncheckedInternet Explorer segments out pages you have marked as favorites. We need to be sure to clear all data, not just some of it.Temporary Internet files and website filesCheckedThis clears your cache, making your browser get a new copy of the webpage, images, etc. It's important to clear this to get a fresh copy the next time you visit, as the copy your browser has may simply be corrupt.Cookies and website dataCheckedCookies are how websites 'know' you when you visit them multiple times. This file can become corrupt, and simply downloading a new one can fix many problems.
2. You will have to log back into any pages you use, such as mail or social media.
3. HistoryCheckedWhile you browse Your browser will keep track of every page you visit, to try to make it easier to return. This can become corrupt due to modern active web pages.Download HistoryPersonal ChoiceThese are a list of files you've downloaded recently. It is entirely safe to delete, or keep this list, as it won't affect pages. Checking this option does not delete the files you've downloaded, just the list the browser keeps.Form DataUncheckedInformation from entering forms online, such as your name, address, or other filled in information. This does not affect how a page loads, and can slow you down on your most commonly used pages.PasswordsUncheckedYour browser will save your passwords while you browse, making it easier to log into your most common websites later. This does not affect how a page loads, and can slow you down on your most commonly used pages.Tracking Protection, ActiveX filtering and Do Not TrackPersonal ChoiceA number of pages will track your use of those pages, and if you've opted out of such tracking. This setting tends not to be well respected from page to page, and some pages simply do not give you the option. While it can affect how a page is displayed, it will only do so in the advertising or other 'personalized content' on that page; not the page itself. It is okay to check or uncheck this option. 
4. When complete, a message will open at the bottom of your browser letting you know the history has been deleted.
   

1. It can take quite a while to delete the cache and history, please be patient.

4. Security-Related Settings

1. Open Internet Explorer.
   

1. Select the Gear icon in the top-right corner, then select Internet options.
   

1. Select the Security tab at the top. Then, make sure Internet is selected for zone, and choose the Default level of Medium-high.
   

1. Select the Content tab at the top. Then, select Clear SSL state.
   

1. A box will open letting you know the SSL cache was cleared. Select OK.
   

1. Select the Advanced tab at the top. Scroll to the bottom of the long list of settings. Make sure Use TLS 1.0, Use TLS 1.1, and Use TLS 1.2 are checked. Then, select OK.
   

5. Clear Browser Hijack

1. Click Start.
   

1. Search inetcpl.cpl and select it.
   

1. 
   
2. Internet Properties will open.
3. On the General tab, review that the homepage is correct and remove those you don't recognize.
   

1. Click the Security tab.
2. Click Reset all zones to default level if it is available.
   

1. Click Trusted sites
2. Click the Sites button.
   

1. Highlight and Remove any websites you do not recognize.
   

1. Click Close when done.
2. Click Restricted sites then click the Sites button.
   

1. Highlight and Remove any helpful websites listed. Leave harmful websites in the list.
   

1. Click Close when done.
2. Click the Programs tab, then click Manage Add-ons.
   

1. Set to show All add-ons and check all entries for each. You may need to research add-ons you do not recognize before you remove them.
   

1. Do the same for Search Providers, and Accelerators. 
2. Click Close when done
3. Return to the Start Menu.
   

1. Search for Internet Explorer.
2. Right-click Internet Explorer and select Open File Location.
   

1. Right-click the Internet Explorer icon and select Properties.
   

1. Click the Shortcut tab.
2. Verify that is only contains C:\Program Files\Internet Explorer\iexplore.exe with nothing after it.
   

1. Open IE and verify shortcut opens successfully.

6. Test Search Page

1. Open Internet Explorer and take note if it shows your normal home page or search page.
   

1. Test your ability to search the web like you normally would.

7. What Are PUPs

Potentially Unwanted Programs (PUPs)

PUPs, or "Potentially unwanted programs," often arrive bundled with your computer, or tag along with another software program you meant to install, but were part of a EULA or "Recommended Offer" you probably clicked right through. These are programs that don't really do anything good for you. Some of these programs can add unwanted browser toolbars that clutter your browser, track your web browsing, show additional advertisements, or change your search page and other related settings.

8. Uninstall Program

You may need to remove an app or program because you need the space, simply don't need it anymore, or it is malicious. The following steps show you how to easily remove an app. The first method is exclusive to Windows 10, the second method will work with all Windows versions.

Windows 10 - Using Windows Settings

1. Click Start (1), then click Settings (2).
   

1. Next, Select Apps.
   

1. Scroll down and locate the app you wish to remove, and click on Uninstall.
   

1. Carefully read any prompts in case there are special instructions. Proceed until the application is removed.
2. Some applications may require that you reboot.

All Windows Versions - Using Control Panel

1. On your keyboard push and release the Windows Key and R at the same time.
   

1. You will see a Run window open up. Type in appwiz.cpl then click on OK.
   

1. Locate a program you wish to remove within the list, click once on it to highlight it, then click on Uninstall.
   

1. Carefully read any prompts in case there are special instructions. Proceed until the application is removed.
2. Some applications may require that your computer be restarted to complete the uninstallation.

9. Restart Your PC

Before your restart or shut down your PC, make sure to save all necessary work to prevent data loss.

• Using the Mouse
• Select the Start menu.
  

• 
  
• By default it is in the lower left corner of your screen.
• Select Power, then select Restart.
  

• Using the Keyboard
• Press the Windows and X keys at the same time. This minimizes any open windows you may have.
  

• Press the Alt and F4 keys at the same time. This tells Windows to close the desktop.
  

• Select Restart, then OK.
  

10. Test Search Page

1. Open Internet Explorer and take note if it shows your normal home page or search page.
   

1. Test your ability to search the web like you normally would.

11. Continued Browser Hijack Issues

Unfortunately, your browser issue cannot be resolved via basic troubleshooting steps. Your machine will require hands-on service to determine the root cause of your issues.

12. What's next?