Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
For some reason, every time I boot up my computer, the homepage for IE5 keeps getting set to some f*kr's url redirect-
http://start.at.slipto.com?urliwant
Every time I boot, it says that "windows
finishing setup" message that happens sometimes when you install a new program,
obviously this is setting my homepage.Of course, I'd like to stop this s#!t from
happening, but I'm more interested in
what that program that loads when I boot
is doing and where it's located.I've tried running virus scan (mcaffee)
to no avail, and the start.at.slipto.com
url won't load.Any help would be tremendously appreciated!
SPECS:
Win 98 SE
IE 5.00.29xxxx

Run msconfig and look for an entry in your startup tab that relates to this. Uncheck the box, apply and restart.

After you remove the cause, you can prevent this from happening in the future by using this tip I picked up in another forum. It was posted by "Kleinkramer".
"I came across this one at http://www.wilders.org/ , and I thought it was worth while sharing:
Windows(98) has a built in bit that allows outsiders
(any site) to read, write, and edit (in other words, to "hack") your Windows
registry. This can cause many problems for you, such as making your browser
behave strangely, changing your homepage, causing programs to hang up or not function, and launching
programs you don't want to run.The Windows program that allows the hacking is called REGWIZC.DLL
(registry wizard control module).The good news is that you can disable it so that it does not allow scripts on
web sites you visit to hack your registry. Here is how to disable it:1. Click on - taskbar/start menu/run
2. Copy and paste the following line into the run field:
regsvr32.exe -u c:\windows\system\regwizc.dll
3. Click OK. You should get a popup message confirming the successful disabling
of regwizc.dll.It is also possible to re-enable regwizc.dll, if you should later decide to allow
outsiders to get into your registry. I can't think of any reason why you should,
but this is how to do it:1. Click on - taskbar/start menu/run
2. Copy and paste the following line into the run field:
regsvr32.exe -c c:\windows\system\regwizc.dll
3. Click OK. You should get a popup message confirming the successful reenabling of
regwizc.dll."

thanks for the info, unfortunately, I can't find the offending program using msconfig.
it still displays the dialog box w/ the
Windows Setup title and says 'updating
system settings'.so it's still hiding somewhere :(
Please help!!

Look in Control Panel>Add/Remove Programs.
If there's nothing there, look in your C:\WINDOWS and C:\WINDOWS\System folders.

Check Start, Programs, StartUplook for reg.hta, right click and delete. Then you must go to Start, Settigs, Control Panel, Internet Options, change your homepage to what you want, click Apply and OK.
The last step must be done without opening IE or else it will run reg.hta again.
The last step can also be done by right clicking on the "E" desktop icon if you have one there, select properties and do the same thing but either way it must be done from outside of IE. The "E" in the QuickLaunch bar does not provide this option.
Bryan

If you do not find reg.hta then you can put a small Reg tool on your desktop, such as the one here:
http://www.langa.com/newsletters/2000/2000-07-10.htm#2 .
One click of that tool will restore your home page to whatever you want, after it's
been hijacked.Bryan

I saw something a couple of weeks ago about this problem (hijacking your home page)...the article said it was done by running regedit at startup...in the 'run'
area of HKLM/Software/microsoft (I THINK!...been a while). A search for the
bogus URL in Regedit should find it.

Look in your windows\system\ directory for a number file( mind was 117087219.exe) and delete it. I was having the same problem. driving me nuts trying to correct it. It would not do it every time. I seen it loading in msconfig. It was loading in three places. Hope this woulds for you.
Rich

Look in your windows\system32\ directory for a number file( mind was 117087219.exe) and delete it. I was having the same problem. driving me nuts trying to correct it. It would not do it every time. I seen it loading in msconfig. It was loading in three places. Hope this woulds for you.
Antonioperfect

Hmm...
Have you heard from a virus called Trojan.win32.slipto_A?
I had in my computer and since then my starting URL address was http://start.at.slipto.com/?theurl.
Deleted virus aaaand... thing was gone...
If u want more specific info about how to delete this virus from computer, send message to this forum... :)
- me

I have the same problem, but I can't find the source file to delete. Once I detected Trojan.win32.slipto_A, but it was with this virus program that detected the files for free, but didnt fiz them untill you paid for it. I havn't found this virus with any other program. I REALLY need help.

Try downloading free 30-day trial version of F-Secure Anti-Virus - program.
You can download it from this address:
URL:
http://www.f-secure.com/download-purchase/Or BitDefender Home Edition 30-day trial version:
URL:
http://www.bitdefender.com/evaluation/evaluation.phpBoth should be able to remove Trojan.win32.slipto_A - virus.
Message here, if any problems or if you were able to delete the virus from your computer.
- me

![]() |
scandisk and defrag still...
|
from win2k to win 98 agai...
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |