W/ so many "homepage hijacked"

problems here, I'm wondering if those malicious sites can secretly trap your IE homepage without you knowing, or is it because people were not careful and accidently clicked on "yes" to let their homepage be changed? Thx!

--文學城www.wenxuecity.com--