- Aug 6, 2012
- 505
New Adware method: manipulating browser shortcuts to change the home page
by Martin Brinkmann
http://www.ghacks.net/2014/10/07/ne...ng-browser-shortcuts-to-change-the-home-page/
Whenever browser makers tighten the defense systems of the browser it does not take long usually before advertising companies and malware writers find new methods to penetrate those defense.
Some browsers display information to the user when the homepage changes while others such as Chrome may even reset settings automatically when changes are noticed.
If you have installed the most recent version of Auslogics Disk Defrag, a popular disk defragmentation software for the Windows operating system, you may have noticed that it displays an offer after installation of the core program to install something that makes Bitable.com the home page in web browsers on the system.
If you open the Bitable website you will notice that it resembles contents that are opened on a browser's new tab page by default.You find a search there, thumbnail links to popular sites, date and weather information, and some other information.
If you click continue (which means give your okay so that the program makes the change) all open browsers are closed. When you restart the browser, you may notice that the home page has changed.
The change affects popular browsers such as Chrome, Internet Explorer and Firefox at the very least and maybe other browsers as well.
If you check the browser's start page settings however you will notice that it has not been modified
And here comes the new part and why I'm writing about it, the Bitable modification does not manipulate a browser setting, it changes only the shortcut on the system.
If you take Chrome as an example: Instead of just pointing to the chrome.exe file on the system, it adds "http://bitable.com/ at the end instructing the browser to load only this url and no other. This means no session restore and none of the usual home pages that may be loaded instead.
To find out if this is indeed the case on your computer, right-click the browser shortcut on the taskbar. Here you may find properties listed directly or after you right-click a second time on the browser name that is displayed there.
Check the target field of the properties window and if you find a url attached at the end, you are affected by this. To resolve it, remove the url at the end.
James
by Martin Brinkmann
http://www.ghacks.net/2014/10/07/ne...ng-browser-shortcuts-to-change-the-home-page/
Whenever browser makers tighten the defense systems of the browser it does not take long usually before advertising companies and malware writers find new methods to penetrate those defense.
Some browsers display information to the user when the homepage changes while others such as Chrome may even reset settings automatically when changes are noticed.
If you have installed the most recent version of Auslogics Disk Defrag, a popular disk defragmentation software for the Windows operating system, you may have noticed that it displays an offer after installation of the core program to install something that makes Bitable.com the home page in web browsers on the system.
If you open the Bitable website you will notice that it resembles contents that are opened on a browser's new tab page by default.You find a search there, thumbnail links to popular sites, date and weather information, and some other information.
If you click continue (which means give your okay so that the program makes the change) all open browsers are closed. When you restart the browser, you may notice that the home page has changed.
The change affects popular browsers such as Chrome, Internet Explorer and Firefox at the very least and maybe other browsers as well.
If you check the browser's start page settings however you will notice that it has not been modified
And here comes the new part and why I'm writing about it, the Bitable modification does not manipulate a browser setting, it changes only the shortcut on the system.
If you take Chrome as an example: Instead of just pointing to the chrome.exe file on the system, it adds "http://bitable.com/ at the end instructing the browser to load only this url and no other. This means no session restore and none of the usual home pages that may be loaded instead.
To find out if this is indeed the case on your computer, right-click the browser shortcut on the taskbar. Here you may find properties listed directly or after you right-click a second time on the browser name that is displayed there.
Check the target field of the properties window and if you find a url attached at the end, you are affected by this. To resolve it, remove the url at the end.
James
