can these web sites hijack the internet explorer?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

There are some web sites which hijack the internet explorer. If I turn on the security settings in high on internet explorer,can these web sites hijack the internet explorer

Thank you in advance
 
Regarding your post:

--------------------
| From: "=?Utf-8?B?b2tyb24=?=" <[email protected]>
| Subject: can these web sites hijack the internet explorer?
| Date: Sat, 17 Jan 2004 22:11:07 -0800
|
| There are some web sites which hijack the internet explorer. If I turn on
the security settings in high on internet explorer,can these web sites
hijack the internet explorer?
|
|Thank you in advance
|

=========

Dear poster,

Setting all zones to High security may accomplish what you desire, but it
might also limit much of the functionality you expect on "safe" web sites.

Here are some resources you can review to accomplish the goal without
severly impacting your experience in browsing:

Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Deceptive Web Pages
http://www3.telus.net/dandemar/decweb.htm
[Courtesy of MS-MVP Jupiter Jones]

Internet Explorer Security:
http://securityadmin.info/noframes/faqget.asp#ie
[Courtesy of Karl Levinson, CISSP, MCSE, MS MVP]

============

This posting is provided "AS IS" with no warranties, and confers no rights.

Windows XP Security Homepage:
http://www.microsoft.com/windowsxp/security/default.asp

Windows 2000 Security Homepage:
http://www.microsoft.com/windows2000/security/default.asp

Top 10 Windows Newsgroups Security Questions:
http://www.microsoft.com/technet/newsgroups/default.asp?url=/technet/newsgro
ups/nodepages/sectop10.asp

=========
Paul Hayes, MCSE
Product Support Services
Microsoft Corporation
(e-mail address removed)
 
| From: "=?Utf-8?B?b2tyb24=?=" <[email protected]>
| There are some web sites which hijack the internet explorer. If I turn on
the security settings in high on internet explorer,can these web sites
hijack the internet explorer?
Setting all zones to High security may accomplish what you desire, but it
might also limit much of the functionality you expect on "safe" web sites.

You can also delve into detail via Custom :-)

You may find the most useful tools lie outside the Security dialog:

1) Wall out BHOs from IE

Browser Helper Objects are basically a bad idea. These are integrated
into IE itself (so outgoing "call home" traffic passes through the
app-aware filters of personal firewalls as already-allowed,
MD5-unchanged IE), are likely privvy to IE's internal data flow, and
don't have to display toolbars or buttons so you know they are there.

In the same IE Tools, Options dialog as the Security tab, choose
Advanced, and look for "[x] Allow 3rd-party browser enhancements" and
UNcheck that. This setting is only in IE 6 and later, and does *not*
wall out similar toolbar intrusions into OE, in my experience.

2) Block changes to home and search pages

These settings can be added via the registry, taking the form of
"No..." keys with 1 as the argument. I can't remember the details,
and don't know whether there's a more user-friendly UI to do this
(TweakUI doesn't, a Zero Admin Kit might). Try a www.google.com on
things like NoChangeHomePage or NoChangeStartPage, etc.


As these are registry settings, anything you can change interactively,
any script or other remote access can unchange again. So check these
settings after cleaning up active traditional or commercial malware -
the tools you use to clean these will NOT mend your fences!


--------------- ----- ---- --- -- - - -
Dreams are stack dumps of the soul
 
Back
Top