Computing.Net > Forums > Windows 95/98 > IE5 homepage keeps getting re-set

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

IE5 homepage keeps getting re-set

Reply to Message Icon

Name: Guile
Date: January 21, 2002 at 08:55:10 Pacific
Comment:

For some reason, every time I boot up my computer, the homepage for IE5 keeps getting set to some f*kr's url redirect-

http://start.at.slipto.com?urliwant

Every time I boot, it says that "windows
finishing setup" message that happens sometimes when you install a new program,
obviously this is setting my homepage.

Of course, I'd like to stop this s#!t from
happening, but I'm more interested in
what that program that loads when I boot
is doing and where it's located.

I've tried running virus scan (mcaffee)
to no avail, and the start.at.slipto.com
url won't load.

Any help would be tremendously appreciated!

SPECS:
Win 98 SE
IE 5.00.29xxxx



Sponsored Link
Ads by Google

Response Number 1
Name: Kevin
Date: January 21, 2002 at 09:11:20 Pacific
Reply:

Run msconfig and look for an entry in your startup tab that relates to this. Uncheck the box, apply and restart.


0

Response Number 2
Name: Toone
Date: January 21, 2002 at 09:42:00 Pacific
Reply:

After you remove the cause, you can prevent this from happening in the future by using this tip I picked up in another forum. It was posted by "Kleinkramer".

"I came across this one at http://www.wilders.org/ , and I thought it was worth while sharing:
Windows(98) has a built in bit that allows outsiders
(any site) to read, write, and edit (in other words, to "hack") your Windows
registry. This can cause many problems for you, such as making your browser
behave strangely, changing your homepage, causing programs to hang up or not function, and launching
programs you don't want to run.

The Windows program that allows the hacking is called REGWIZC.DLL
(registry wizard control module).

The good news is that you can disable it so that it does not allow scripts on
web sites you visit to hack your registry. Here is how to disable it:

1. Click on - taskbar/start menu/run
2. Copy and paste the following line into the run field:
regsvr32.exe -u c:\windows\system\regwizc.dll
3. Click OK. You should get a popup message confirming the successful disabling
of regwizc.dll.

It is also possible to re-enable regwizc.dll, if you should later decide to allow
outsiders to get into your registry. I can't think of any reason why you should,
but this is how to do it:

1. Click on - taskbar/start menu/run
2. Copy and paste the following line into the run field:
regsvr32.exe -c c:\windows\system\regwizc.dll
3. Click OK. You should get a popup message confirming the successful reenabling of
regwizc.dll."


0

Response Number 3
Name: guile
Date: January 21, 2002 at 17:29:28 Pacific
Reply:

thanks for the info, unfortunately, I can't find the offending program using msconfig.

it still displays the dialog box w/ the
Windows Setup title and says 'updating
system settings'.

so it's still hiding somewhere :(

Please help!!



0

Response Number 4
Name: jinks
Date: January 21, 2002 at 18:19:04 Pacific
Reply:

Look in Control Panel>Add/Remove Programs.

If there's nothing there, look in your C:\WINDOWS and C:\WINDOWS\System folders.


0

Response Number 5
Name: Bryco
Date: January 21, 2002 at 18:59:26 Pacific
Reply:

Check Start, Programs, StartUplook for reg.hta, right click and delete. Then you must go to Start, Settigs, Control Panel, Internet Options, change your homepage to what you want, click Apply and OK.

The last step must be done without opening IE or else it will run reg.hta again.

The last step can also be done by right clicking on the "E" desktop icon if you have one there, select properties and do the same thing but either way it must be done from outside of IE. The "E" in the QuickLaunch bar does not provide this option.

Bryan


0

Related Posts

See More



Response Number 6
Name: Bryco
Date: January 21, 2002 at 19:03:22 Pacific
Reply:

If you do not find reg.hta then you can put a small Reg tool on your desktop, such as the one here:
http://www.langa.com/newsletters/2000/2000-07-10.htm#2 .
One click of that tool will restore your home page to whatever you want, after it's
been hijacked.

Bryan


0

Response Number 7
Name: Sparks
Date: January 28, 2002 at 15:52:14 Pacific
Reply:

I saw something a couple of weeks ago about this problem (hijacking your home page)...the article said it was done by running regedit at startup...in the 'run'
area of HKLM/Software/microsoft (I THINK!...been a while). A search for the
bogus URL in Regedit should find it.


0

Response Number 8
Name: sparks
Date: January 28, 2002 at 16:04:00 Pacific
Reply:

Me again...check this out.

http://66.34.160.192/spywareinfo/hijacked.html



0

Response Number 9
Name: rich
Date: March 21, 2002 at 23:37:36 Pacific
Reply:

Look in your windows\system\ directory for a number file( mind was 117087219.exe) and delete it. I was having the same problem. driving me nuts trying to correct it. It would not do it every time. I seen it loading in msconfig. It was loading in three places. Hope this woulds for you.

Rich


0

Response Number 10
Name: Bryco
Date: March 22, 2002 at 13:30:29 Pacific
Reply:

Rich, thanks for the valuable input. That is one that I have not heard of.

Bryan


0

Response Number 11
Name: Antonio Marino
Date: March 30, 2002 at 20:31:27 Pacific
Reply:

Look in your windows\system32\ directory for a number file( mind was 117087219.exe) and delete it. I was having the same problem. driving me nuts trying to correct it. It would not do it every time. I seen it loading in msconfig. It was loading in three places. Hope this woulds for you.
Antonio

perfect


0

Response Number 12
Name: me
Date: April 9, 2002 at 14:58:47 Pacific
Reply:

Hmm...

Have you heard from a virus called Trojan.win32.slipto_A?

I had in my computer and since then my starting URL address was http://start.at.slipto.com/?theurl.

Deleted virus aaaand... thing was gone...

If u want more specific info about how to delete this virus from computer, send message to this forum... :)

- me


0

Response Number 13
Name: Phil
Date: April 10, 2002 at 13:24:51 Pacific
Reply:

I have the same problem, but I can't find the source file to delete. Once I detected Trojan.win32.slipto_A, but it was with this virus program that detected the files for free, but didnt fiz them untill you paid for it. I havn't found this virus with any other program. I REALLY need help.


0

Response Number 14
Name: me
Date: April 10, 2002 at 16:52:45 Pacific
Reply:

Try downloading free 30-day trial version of F-Secure Anti-Virus - program.

You can download it from this address:

URL:
http://www.f-secure.com/download-purchase/

Or BitDefender Home Edition 30-day trial version:

URL:
http://www.bitdefender.com/evaluation/evaluation.php

Both should be able to remove Trojan.win32.slipto_A - virus.

Message here, if any problems or if you were able to delete the virus from your computer.

- me


0

Sponsored Link
Ads by Google
Reply to Message Icon

scandisk and defrag still... from win2k to win 98 agai...



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows 95/98 Forum Home


Sponsored links

Ads by Google


Results for: IE5 homepage keeps getting re-set

home page keeps getting reset www.computing.net/answers/windows-95/home-page-keeps-getting-reset/157714.html

My homepage keeps changing www.computing.net/answers/windows-95/my-homepage-keeps-changing/155091.html

Search keeps re-setting itself www.computing.net/answers/windows-95/search-keeps-resetting-itself/96727.html