CN105243134A - Method and equipment for processing hijacked browser - Google Patents

Abstract

The invention discloses a method and equipment for processing a hijacked browser, which identifies whether the browser has been hijacked; The parameter information of the hijacked original web page; according to the parameter information of the original web page, the page content related to the original web page is obtained from the local storage device; The content of the page is displayed in . The method and device for processing a hijacked browser disclosed in the present invention solve the technical problem of long processing time in the processing method when the browser is hijacked in the prior art, and realize shortening of the processing time and the process of processing the hijacked browser. The technical effect of increasing the usage rate of the browser.

Description

A method and device for processing a hijacked browser

technical field

The invention relates to the technical field of computer networks, in particular to a method and equipment for processing hijacked browsers.

Background technique

With the rapid development of the Internet, browsers provide a variety of functions for users to quickly find materials and various information that individuals need on the Internet. However, in reality, the browser will tamper with the browser through browser plug-ins, browser helper objects (BrowserHelperObject, BHO for short), WinsockLSP, etc., so that the browser is hijacked, and when the browser is hijacked, the browser's The homepage and Internet search page will become unknown websites, redirected to malicious webpages when visiting normal websites, redirected to websites designated by hijacking software when entering wrong URLs, and severely slowing down the browser speed when entering characters, etc. Because these hijacked browsers have caused adverse effects on users' daily browsing, a very important job of network security tools is to identify the hijacked browsers that exist in the network.

In the prior art, when the browser is hijacked, the following methods are usually used for processing: one, uninstall and reinstall the browser; When the browser is installed, the browser cannot be used, so that the method for processing the hijacked browser in the prior art has the problems of long processing time and reduced browser usage during the process of processing the hijacked browser.

Contents of the invention

By providing a method and device for processing a hijacked browser, the embodiment of the present application solves the technical problem of long processing time in the processing method when the browser is hijacked in the prior art, and realizes shortening the processing time and shortening the processing time when processing the hijacked browser. The technical effect of increasing the usage rate of the browser during the process of hijacking the browser.

On the one hand, the present application provides the following technical solutions through an embodiment of the present application:

This application discloses a method for handling browser hijacking, including:

Identify whether the browser has been hijacked;

When it is identified that the browser is hijacked, obtain parameter information of an original webpage that is not hijacked corresponding to the hijacked webpage loaded on the browser;

Acquiring the page content of the original webpage from a local storage device according to the parameter information of the original webpage;

loading the page content in the browser to display the page content in the browser.

Optionally, the obtaining parameter information of the original webpage that is not hijacked corresponding to the hijacked webpage loaded on the browser specifically includes:

Obtaining the jump information corresponding to the hijacked webpage;

Based on the jump information, parameter information of the original webpage that has not been hijacked is acquired.

Optionally, the local storage device includes a user terminal on which the browser is installed and a local server connected to the user terminal.

Optionally, the loading the page content in the browser specifically includes:

Loading the page content in the browser, and covering the display content of the hijacked web page with the page content.

Optionally, the loading the page content in the browser specifically includes:

The page content is loaded in the browser, and the displayed content of the hijacked webpage is replaced by the page content.

On the other hand, the present application provides the following technical solutions through an embodiment of the present application:

The present application also discloses a device for processing a browser hijacked, the device comprising:

An identification unit, configured to identify whether the browser has been hijacked;

An original web page obtaining unit, configured to obtain parameter information of an original web page that is not hijacked corresponding to the hijacked web page loaded on the browser when the browser is identified as being hijacked;

a page content acquiring unit, configured to acquire the page content of the original web page from a local storage device according to the parameter information of the original web page;

A loading unit, configured to load the page content in the browser, so as to display the page content in the browser.

Optionally, the device also includes:

A jump information acquisition unit, configured to acquire the jump information corresponding to the hijacked webpage;

The original web page obtaining unit is specifically configured to obtain parameter information of the original web page that has not been hijacked based on the jump information.

Optionally, the local storage device includes a user terminal on which the browser is installed and a local server connected to the user terminal.

Optionally, the loading unit is specifically configured to load the page content in the browser, and cover the page content with the display content of the hijacked webpage.

Optionally, the loading unit is specifically configured to load the page content in the browser, and replace the displayed content of the hijacked webpage with the page content.

One or more technical solutions provided in the embodiments of this application have at least the following technical effects or advantages:

According to a method and device for processing a hijacked browser according to the present invention, through the present invention, firstly, it is identified whether the browser is hijacked, and when it is recognized that the browser is hijacked, the hijacked browser information loaded on the browser is obtained. The parameter information of the original webpage corresponding to the webpage that has not been hijacked; according to the parameter information, the page content related to the original webpage is obtained from the local storage device and loaded to display the page content in the browser In this way, after identifying that the browser is hijacked, the page content of the original web page can be directly obtained from the local storage device for loading, so that the browser can immediately display the page content of the original web page, shortening the processing time. time, and the browser can still be used during the processing, which improves the utilization rate of the browser during the processing of the hijacked browser.

The above description is only an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention, it can be implemented according to the contents of the description, and in order to make the above and other purposes, features and advantages of the present invention more obvious and understandable , the specific embodiments of the present invention are enumerated below.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following will briefly introduce the drawings that need to be used in the description of the embodiments. Obviously, the drawings in the following description are some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained based on these drawings without creative effort.

Fig. 1 is the flow chart of the method for processing hijacked browser that the embodiment of the present invention provides;

Fig. 2 is a block diagram of a device for processing a hijacked browser provided by an embodiment of the present invention.

detailed description

By providing a method and device for processing a hijacked browser, the embodiment of the present application solves the technical problem of long processing time in the processing method when the browser is hijacked in the prior art, and realizes shortening the processing time and shortening the processing time when processing the hijacked browser. The technical effect of increasing the usage rate of the browser during the process of hijacking the browser.

In order to better understand the above-mentioned technical solution, the above-mentioned technical solution will be described in detail below in conjunction with the accompanying drawings and specific implementation methods.

Referring to Fig. 1, the method for processing hijacked browser that the embodiment of the present invention provides comprises the following steps:

S101: identifying whether the browser is hijacked;

S102: When it is identified that the browser is hijacked, obtain parameter information of an original webpage that is not hijacked and corresponding to the hijacked webpage loaded on the browser;

S103: According to the parameter information of the original webpage, acquire the page content of the original webpage from a local storage device;

S104: Load the page content in the browser, so as to display the page content in the browser.

Wherein, in step S101, the execution subject of the present application may be the device installed with the browser, or the browser, which is not specifically limited in the present application, wherein, when it is identified that the browser is hijacked, it may be Identify whether the browser has been hijacked by three methods. The first identification method may specifically be to obtain a web page access request and its corresponding operation information; Assume that the rules include the operation requests allowed by the browser; when the browser detects that the operation information does not comply with the preset rules, it recognizes that the browser has been hijacked; the browser detects that the When the operation information conforms to the preset rule, it is identified that the browser is not hijacked.

Wherein, after the browser is started, it will receive the user's operation information, and based on the operation information, the browser will automatically generate and obtain a webpage access request corresponding to the operation information, so that the browsing The browser can obtain the web page access request and its corresponding operation information, wherein the operation information can be, for example, the information that the user clicks on the hyperlink on the navigation page of the browser, or the information entered in the search bar of the browser. For the information of search information, of course, the execution subject of the first identification method may also be a device.

For example, take browser a as an example. After browser a is started, it receives the search information of www.axxx.com entered by the user in the search bar of browser a, and browser a generates an access to www.axxx based on the operation information. The webpage access request of .com includes Stringurl="http://www.axxx.com/" for example; so that the a browser can receive the webpage access request for www.axxx.com and its corresponding operation information, The operation information is the information of entering www.axxx.com in the search bar of the browser a, because the default rule of the browser a is the first operation request of entering search information in the search bar of the browser and the browsing The second type of operation request is generated by clicking on the hyperlink on the navigation page of the browser. Since the operation information matches the first type of operation request, it is determined that the operation information conforms to the preset rule, that is, The a browser can judge that the a browser is not hijacked, so that the accuracy of the browser in identifying whether the browser is hijacked according to the judgment result is improved, and the browser judges whether it is hijacked by itself hijacked, compared with the manual judgment in the prior art, the work efficiency of its judgment can also be greatly improved.

Specifically, the second identification method can specifically identify whether the browser has been hijacked through the domain name, and its specific implementation steps are as follows: the browser obtains the webpage access request of the navigation page, and obtains the webpage corresponding to the webpage access request. the target domain name; the browser judges whether the target domain name is consistent with the original domain name of the navigation page; The browser is not hijacked; when the browser judges that the target domain name is inconsistent with the original domain name, it recognizes that the browser has been hijacked.

Wherein, the browser will automatically load the navigation page when starting, so that the browser can obtain the webpage access request of the navigation page, and then obtain the target domain name according to the webpage access request; of course, the After the browser is started, when the browser receives a startup request from the user to start the navigation page, the browser loads the navigation page according to the startup request, and then obtains the webpage access request of the navigation page , and then obtain the target domain name according to the webpage access request, and then judge whether the target domain name is consistent with the original domain name. Of course, the execution subject of the first identification method may also be a device.

For example, take browser a as an example. When browser a starts, it will automatically load navigation page a. When browser a loads navigation page a, it will generate a web page access request for navigation page a, for example, containing Stringurl="http:// hao.bxxx.cn/"; in this way, the browser can extract the target domain name as hao.bxxx.cn from the web page access request of a navigation page, if the original domain name of a navigation page is pre-stored in browser a as hao. axxx.cn, because hao.bxxx.cn is different from hao.axxx.cn, that is, browser a judges that the target domain name is inconsistent with the original domain name, so that browser a detects that the judgment result represents the target domain name Inconsistent with the original domain name, thereby identifying that the a browser has been hijacked; if the original domain name of the a navigation page is pre-stored in the a browser as hao.bxxx.cn, since the original domain name is the same as the target domain name, That is, browser a judges that the target domain name is consistent with the original domain name, so that browser a detects that the judgment result indicates that the target domain name is consistent with the original domain name, thereby identifying that browser a is not hijacked.

Specifically, the third identification method may be to determine whether the browser is hijacked through the parameter setting information of the command line of the shortcut, and its specific implementation steps are as follows: obtain the command line of the shortcut of the browser Parameter setting information; judging whether the setting method corresponding to the parameter setting information is consistent with the preset method; when it is determined that the setting method is inconsistent with the preset method, identifying that the browser has been hijacked; judging When it is found that the setting mode is consistent with the preset mode, it is identified that the browser is not hijacked.

Wherein, the execution subject of the third identification method is a device, and the device may be, for example, a tablet computer, a notebook computer, a smart phone, a desktop computer, etc., and a browser is installed in the device, and the browser shortcut is obtained When setting the parameter information of the command line, you can start the command line program installed in the device, for example, in the windows environment, the command line program is usually cmd.exe, and then the device receives the user input and browses the When the command information corresponding to the quick mode of the browser is displayed, the parameter setting information is displayed in the command line program, so that according to the displayed content, the parameter setting information can be obtained, wherein the parameter setting information Contains the setting method information of the shortcut. Of course, the parameter setting information can also be obtained by viewing the attribute information of the shortcut of the browser. Further, the preset mode is the default setting mode of the shortcut of the browser, which can be manually setting mode or automatic setting mode.

For example, taking laptop A as an example, a b browser is installed in laptop A and a shortcut of b browser is created, according to the received information that the user enters cmd in the search bar of the start menu of laptop A , then start cmd.exe, and then display the parameter setting information corresponding to the shortcut of browser b in cmd.exe according to the received command information corresponding to the shortcut of searching b browser, so that the notebook computer A obtains the parameter setting information, if the setting method information of the shortcut included in the parameter setting information shows b that the setting method corresponding to the shortcut of the browser is a manual setting method, since the manual setting method is different from the If the default mode is the same, it is determined that the setting mode is consistent with the preset mode, so that it can be determined that the b browser is not hijacked; if the corresponding setting mode of the shortcut of the b browser is an automatic setting mode, due to automatic If the setting method is different from the preset method, then it is determined that the setting method is inconsistent with the preset method, so it can be determined that the b browser has been hijacked.

Wherein, when the b browser is not hijacked, the setting method corresponding to the shortcut of the b browser must be the preset method, and when the b browser is hijacked, the setting method corresponding to the shortcut of the b browser will be Different from the preset method, in this way, by judging whether the setting method corresponding to the shortcut of the b browser is consistent with the preset method, it can be accurately judged whether the b browser is hijacked, so that the accuracy of the judgment be improved.

Next, step S102 is executed. In this step, when it is identified that the browser is hijacked, the parameter information of the original webpage that is not hijacked and corresponding to the hijacked webpage loaded on the browser is acquired.

Wherein, the hijacked webpage refers to a hijacked webpage, and the unhijacked original webpage refers to a webpage before being hijacked. For example, taking browser a as an example, browser a receives a user click When the button of a browser's automatic a navigation page is pressed, the a navigation page is automatically loaded on the a browser, but at this time, the a browser is hijacked, and the loaded a navigation page is hijacked to the b navigation page, so that when browsing in a The page content of the navigation page b displayed on the browser, wherein the navigation page a is the original webpage that has not been hijacked, and the navigation page b is the hijacked webpage.

In the specific implementation process, when it is identified that the browser is hijacked through step S101, the jump information corresponding to the hijacked web page can be obtained; based on the jump information, the original web page that has not been hijacked can be obtained Parameter information, wherein the jump information includes information about jumping from the original webpage to the hijacked webpage, so that the parameter information of the original webpage can be obtained from the jump information, and the The parameter information includes information such as the domain name and/or website address of the original webpage. Of course, when it is recognized that the browser is hijacked, the execution code corresponding to the hijacked webpage can also be obtained, and according to the execution code, obtain Parameter information of the original web page.

For example, taking browser a as an example, when browser a recognizes that browser a has been hijacked, obtain the hijacked page loaded on browser a as navigation page c, and navigation page c is the hijacked webpage, and obtain The jump information corresponding to the c navigation page, if the information contained in the jump information jumps from the a navigation page to the c navigation page, according to the jump information, the parameter information of the a navigation page is obtained from the a navigation page The domain name is hao.axxx.cn.

Next, step S103 is executed. In this step, the page content of the original web page is obtained from the local storage device according to the parameter information of the original web page.

In a specific implementation process, the local storage device includes a user terminal installed with the browser and a local server connected to the user terminal, and a large number of web page contents are stored in the local storage device, and the original web page Part or all of the content in the parameter information is a keyword to search in the local storage device, and the stored data that matches the parameter information is the page content of the original web page, wherein the local storage The page content of the original webpage is pre-stored in the device.

Specifically, when the page content of a large number of web pages is stored in the local storage device, an index may be established for the stored page content of a large number of web pages, so that when the corresponding page content is found according to the parameter information of the original web page , the page content of the original webpage can be found faster through the index, and the efficiency of the search is improved; of course, it is also possible to traverse all the data stored in the local storage device, and then find the page content of the original webpage, wherein , when storing the page content of a large number of web pages in the local storage device, the domain name and/or URL of the web page corresponding to each page content is used as the file name, so that by searching through the parameter information of the original web page, it can be obtained from The pre-stored page content of the original webpage is obtained from the local storage device.

For example, taking browser a as an example, when browser a recognizes that browser a has been hijacked, obtain the hijacked page loaded on browser a as navigation page c, and navigation page c is the hijacked webpage, and obtain The jump information corresponding to the c navigation page, if the information contained in the jump information jumps from the a navigation page to the c navigation page, according to the jump information, the parameter information of the a navigation page is obtained from the a navigation page Domain name hao.axxx.cn, and then search for the keywords of hao.axxx.cn from the page content of a large number of web pages stored in the tablet computer A with a browser installed, and find the corresponding page content, which is a navigation The page content of the page.

Next, step S104 is executed. In this step, the page content is loaded in the browser to display the page content in the browser.

In the specific implementation process, the page content can be loaded in the browser, and the page content can cover the display content of the hijacked webpage; the page content can also be loaded in the browser, and the The display content of the hijacked webpage is replaced by the page content, and the page content of the original webpage can be loaded on the browser by these two methods, so that the browser can immediately display the page content of the original webpage, The processing time is shortened, and the browser can still be used during the processing, and the utilization rate of the browser during the processing of the hijacked browser is improved.

Specifically, after the page content of the original page is acquired through step S103, the page content is directly loaded on the browser and displayed, so that the displayed content matches the user's needs.

For example, taking browser a as an example, when browser a recognizes that browser a has been hijacked, obtain the hijacked page loaded on browser a as navigation page c, and navigation page c is the hijacked webpage, and obtain The jump information corresponding to the c navigation page, if the information contained in the jump information jumps from the a navigation page to the c navigation page, according to the jump information, the parameter information of the a navigation page is obtained from the a navigation page domain name hao.axxx.cn, and then search for the keyword hao.axxx.cn from the page content of a large number of webpages stored in the tablet computer A with a browser installed, and find the folder named hao.axxx.cn , and then the data read from this folder is the page content of a navigation page, and then directly load the read page content of a navigation page on a browser, so that the page content of a navigation page covers c navigation The page content of page, like this, makes what show on a browser still be the page content of a navigation page, thereby solved the problem that shows described hijacked webpage namely c navigation page on a browser, has shortened processing time, and The a browser can still be used during the processing, which improves the utilization rate of the a browser in the process of processing the hijacked a browser.

One or more technical solutions provided in the embodiments of this application have at least the following technical effects or advantages:

According to a method of processing a hijacked browser of the present invention, through the present invention, firstly, it is identified whether the browser is hijacked, and when the browser is identified as being hijacked, the hijacked web page corresponding to the hijacked webpage loaded on the browser is acquired The parameter information of the original webpage that has not been hijacked; according to the parameter information, the page content related to the original webpage is obtained from the local storage device and loaded, so as to display the page content in the browser, so , after identifying that the browser is hijacked, the page content of the original web page can be directly obtained from the local storage device for loading, so that the browser can immediately display the page content of the original web page, shortening the processing time, Moreover, the browser can still be used during the processing, which improves the utilization rate of the browser during the processing of the hijacked browser.

According to the same inventive concept, another embodiment of the present application provides a device for handling browser hijacking, referring to FIG. 2 , the device includes:

An identification unit 201, configured to identify whether the browser has been hijacked;

The original web page obtaining unit 202 is configured to obtain parameter information of an original web page that is not hijacked corresponding to the hijacked web page loaded on the browser when it is recognized that the browser is hijacked;

A page content obtaining unit 203, configured to obtain the page content of the original web page from a local storage device according to the parameter information of the original web page;

The loading unit 204 is configured to load the page content in the browser, so as to display the page content in the browser.

Wherein, when the device recognizes that the browser has been hijacked, it can identify whether the browser has been hijacked through three methods. The first identification method can specifically be to obtain a web page access request and its corresponding operation information ; Then detect whether the operation information conforms to the preset rules, the preset rules include the operation requests allowed by the browser; when it is detected that the operation information does not comply with the preset rules, identify the browser has been hijacked; when it is detected that the operation information conforms to the preset rule, it is identified that the browser is not hijacked.

Specifically, the second identification method may specifically identify whether the browser has been hijacked by using a domain name, and its specific implementation steps are as follows: Corresponding target domain name; judging whether the target domain name is consistent with the original domain name of the navigation page; when judging that the target domain name is consistent with the original domain name, then identifying that the browser has not been hijacked; judging When it is found that the target domain name is inconsistent with the original domain name, it is identified that the browser has been hijacked.

Specifically, the third identification method may specifically be to determine whether the browser is hijacked through the parameter setting information of the command line of the shortcut, and its specific implementation steps are as follows: the device acquires the command of the shortcut of the browser row of parameter setting information; judging whether the setting method corresponding to the parameter setting information is consistent with the preset method; when it is determined that the setting method is inconsistent with the preset method, identifying that the browser has been hijacked; When it is determined that the setting mode is consistent with the preset mode, it is identified that the browser is not hijacked.

Specifically, the device also includes:

Jump information obtaining unit 205, configured to obtain the jump information corresponding to the hijacked webpage;

The original web page obtaining unit 202 is specifically configured to obtain the parameter information of the original web page that has not been hijacked based on the jump information.

Specifically, the local storage device includes a user terminal on which the browser is installed and a local server connected to the user terminal.

Specifically, the loading unit 204 is specifically configured to load the page content in the browser, and cover the page content with the display content of the hijacked webpage.

Specifically, the loading unit 204 is specifically configured to load the page content in the browser, and replace the displayed content of the hijacked webpage with the page content.

The above-mentioned technical solutions in the embodiments of the present application have at least the following technical effects or advantages:

According to a device for processing a hijacked browser according to the present invention, through the present invention, firstly, it is identified whether the browser is hijacked, and when the browser is identified as being hijacked, the hijacked web page corresponding to the hijacked webpage loaded on the browser is obtained. The parameter information of the original webpage that has not been hijacked; according to the parameter information, the page content related to the original webpage is obtained from the local storage device and loaded, so as to display the page content in the browser, so , after identifying that the browser is hijacked, the page content of the original web page can be directly obtained from the local storage device for loading, so that the browser can immediately display the page content of the original web page, shortening the processing time, Moreover, the browser can still be used during the processing, which improves the utilization rate of the browser during the processing of the hijacked browser.

Those skilled in the art should understand that the embodiments of the present invention may be provided as methods, systems, or computer program products. Accordingly, the present invention can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

While preferred embodiments of the invention have been described, additional changes and modifications to these embodiments can be made by those skilled in the art once the basic inventive concept is appreciated. Therefore, it is intended that the appended claims be construed to cover the preferred embodiment as well as all changes and modifications which fall within the scope of the invention.

Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalent technologies, the present invention also intends to include these modifications and variations.

Claims (10)

1. process the method that browser is held as a hostage, it is characterized in that, comprising:

Identify whether browser is held as a hostage;

When identifying described browser and being held as a hostage, obtain the parameter information of the original web page of not being held as a hostage corresponding to the webpage of being held as a hostage be carried on described browser;

According to the parameter information of described original web page, from local memory device, obtain the content of pages with described original web page;

Described content of pages is loaded, to show described content of pages in described browser in described browser.

2. the method for claim 1, is characterized in that, described acquisition is carried in the parameter information of the original web page of not being held as a hostage corresponding to webpage of being held as a hostage on described browser, and specifically comprises:

The jump information that webpage of being held as a hostage described in acquisition is corresponding;

Based on described jump information, obtain the parameter information of described original web page.

3. method as claimed in claim 2, it is characterized in that, described local memory device comprises the user terminal installing described browser and the home server be connected with described user terminal.

4. the method as described in any one of claims 1 to 3, is characterized in that, describedly in described browser, loads described content of pages, specifically comprises:

Described content of pages is loaded, the displaying contents of webpage of being held as a hostage described in being covered by described content of pages in described browser.

5. the method as described in any one of claims 1 to 3, is characterized in that, describedly in described browser, loads described content of pages, specifically comprises:

In described browser, load described content of pages, the displaying contents of described webpage of being held as a hostage is replaced with described content of pages.

6. process the equipment that browser is held as a hostage, it is characterized in that, described equipment comprises:

Recognition unit, for identifying whether browser is held as a hostage;

Original web page acquiring unit, for when identifying described browser and being held as a hostage, obtains the parameter information of the original web page of not being held as a hostage corresponding to the webpage of being held as a hostage be carried on described browser;

Content of pages acquiring unit, for the parameter information according to described original web page, obtains the content of pages with described original web page from local memory device;

Loading unit, for loading described content of pages in described browser, to show described content of pages in described browser.

7. equipment as claimed in claim 6, it is characterized in that, described equipment also comprises:

Jump information acquiring unit, for the jump information that webpage of being held as a hostage described in obtaining is corresponding;

Described original web page acquiring unit, specifically for based on described jump information, the parameter information of the original web page of not being held as a hostage described in acquisition.

8. equipment as claimed in claim 6, it is characterized in that, described local memory device comprises the user terminal installing described browser and the home server be connected with described user terminal.

9. the equipment as described in any one of claim 6 ~ 8, is characterized in that, described loading unit, specifically for loading described content of pages in described browser, and the displaying contents of webpage of being held as a hostage described in described content of pages is covered.

10. the equipment as described in any one of claim 6 ~ 8, is characterized in that, described loading unit, specifically for loading described content of pages in described browser, and the displaying contents of described webpage of being held as a hostage is replaced with described content of pages.