Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

On a Windows 7 system, the search provider has been hijacked, and keeps prompting us to change it when Internet Explorer 9 starts up. It brings up the Manage Add ons dialogue, and we can click on any of the providers, but clicking Set as Default does nothing. We can delete anything other than the one that is ironically named nothing, and it even does it if I launch Internet Properties without IE9 starting. I then tried to Reset all the settings, but it did not change anything.

Where in the registry or on the filesystem does Windows store this data so I can manually remove the entries?

share|improve this question

2 Answers 2

up vote 7 down vote accepted

For user-specific search providers, edit this registry key:

HKCU\Software\Microsoft\Internet Explorer\SearchScopes

For system-wide search providers, edit this registry key:

HKLM\Software\Microsoft\Internet Explorer\SearchScopes
share|improve this answer

HijackThis will detect unauthorized modifications to IE’s search engines (via each of several different methods) and let you revert them easily.

Further, if you know you have malware, run a scan with some malware scanners, including specifically Spybot which can find numerous problems and “innoculate/immunize” IE at both the user and system levels.

share|improve this answer
    
malwarebytes.org works wonders as well. –  Phillip R. Mar 10 '12 at 0:39
    
Well, yes; there’s also SUPERAntiSpyware, and so on, and so on, but I was narrowing it down to this specific issue. –  Synetech Mar 10 '12 at 0:43

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.