This is likely a product of a
Trojan Horse Generator Script used by some questionable
Webmasters to produce a script that changes and keeps
changing your browser's start up page back to the one of
their choosing when Windows boots up. The fact is there are
several such scripts or applets around.
Java_needy.a
is but one of several examples of this type of annoyance. The only real fixes
for
this are to remove the offending script or applet from the
start up and
registry. (see the Housecall link on the left if your
Antivirus software has failed to keep this off your system as it should detect
the offending script or applet and help you with some more detailed cleaning
instructions. ) You can turn off all browser scripting in the Tools
- Internet Options - Advanced section on Internet Explorer to
fix the problem but at the cost of a loss of JAVA function on
your system. Below is a section about how to go about
removing the script from the Registry but great care needs to
be taken when editing Windows Registry entries as it is
possible to make Windows no longer function by incorrectly
editing things. For this reason I suggest if you are not
comfortable with such things to seek assistance of a more
advanced user to make such edits. This being said if care is
taken, most could remove the problem using the information
below as a GENERAL GUILD. Since all browsers, webpages and
sites can customize the name of this file the name shown in
the example would not be the same for other cases.
-
First, use Internet Explorer's Internet
Options dialog box to reset your home and search pages
back to what they were before.
-
Next, select Start, choose Run, type
msconfig, and press Enter. Click the Startup tab.
-
In the resulting list, look for a
command with either the word 'regedit' or '.reg' in it
(EXAMPLE would be 'C:\Windows\regedit.exe/s
C\Windows\System\radB9819.tmp'). When you find it,
uncheck it, then click OK.
-
That's probably all you need to do, but
to be safe, it wouldn't hurt to delete the file mentioned
in that line.
-
Don't delete regedit.exe -- you need
that -- but delete the other file referenced there. And
it wouldn't hurt to edit the Registry, searching for and
removing all references to the offending site.
The process for repair of most of the items
would be the same for Netscape however you would be using the
Preferences section to change the start up page on the
browser.
It may also be prudent to set your browser's security setting
higher so it would have to ask to run an unsigned script or
perhaps set your antivirus to operation in real time mode if
you have not done so already. The use of these type of
scripts is widely used on pornograhic sites and on domains
selected due to the fact they are close in spelling to a
widely used domain in an attempt to pick up on typos and
other errors. They are often widely used on WAREZ type sites
as well. The reason for this type of trick is to add to the
count of advertisements seen on the page in some cases but
more often it is just the fact some websites believe a
percentage of those who end up there will purchase a
subsription or service.
Additional directions from Trend
Antivirus
for removal of this problem from your system start up.
I
highly recommend reading this for Windows ME and Windows XP
users before they attempt any restores or other
changes.
Additional reading..
on About.com
JS Exception
JS Noclose
HijackThis Page
(anti hijack software)
|
