How to modify the “Startup” command under DOS - China DOS Union Forum

A few days ago I accidentally visited some website, and ever since then, every time I turn on the computer that site pops up automatically. I can't delete it no matter what. And I'm using WINDOWS98, but the “Run” command in the “Start” menu has been blocked by the administrator, so I can't use it. I want to ask how to modify the “Startup” command under DOS. How do I delete a malicious website address. Many thanks!!

You got hit by a malicious script in a web page. I suffered from it before too, but I took care of it in 15 minutes! Specifically, you should do this:

1. Change the IE start page back. If the malicious web page still opens automatically at certain intervals, that means there is still a malicious program running in memory. At that point you should open Windows Task Manager, find the suspicious process of that program, and force it to end.
2. Open the registry editor and go to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run. Check whether there is any suspicious program auto-start entry there, and if there is, delete it.
3. This still may not be enough; when you do something, do it thoroughly! We also need to check the Windows system configuration files. Find the file “Win.ini” under the Windows directory and open it. At the beginning you can see the following two lines:
load=
run=
These are also auto-start entries. If there is a command line after the equal sign, then Windows will automatically run the specified program when it starts. Under normal circumstances there should be nothing after the equal sign. If there is a command line there, then it is very likely a trojan. So if there is a command line after the equal sign, you should delete it too.

After the above three steps, the malicious script in your system will have been completely cleared out. Finally, don't forget to restart the system! But I suggest you also completely delete the files related to the malicious program from the system directory, so as to clean everything up.

If the “Run” item in the Start menu has been disabled, you can still browse the Windows system directory, right? If so, wouldn't it be enough to just run the program you need directly!

If it really doesn't work, go to the Meiping website and download Meiping Internet Cafe Cleanup Expert. It'll be taken care of in no time.

You can directly log in to 3721 Internet Real Name!! That'll solve it right away~~~~~~~~~

You can use search to find REGEDIT (registry). After opening it, use CORL+F to search for POLICIES, then
find the NORUN item and change it to 0. Press F5 to refresh, close the registry, and restart, and the “Run” option will appear.

Floor1　liuziy1	Posted 2003-08-22 00:00
初级用户　Posts 2　Credits 108
A few days ago I accidentally visited some website, and ever since then, every time I turn on the computer that site pops up automatically. I can't delete it no matter what. And I'm using WINDOWS98, but the “Run” command in the “Start” menu has been blocked by the administrator, so I can't use it. I want to ask how to modify the “Startup” command under DOS. How do I delete a malicious website address. Many thanks!!

Floor2　红色狂想	Posted 2003-08-22 00:00
金牌会员　Posts 1,501　Credits 4,289　From 河南省
You got hit by a malicious script in a web page. I suffered from it before too, but I took care of it in 15 minutes! Specifically, you should do this: 1. Change the IE start page back. If the malicious web page still opens automatically at certain intervals, that means there is still a malicious program running in memory. At that point you should open Windows Task Manager, find the suspicious process of that program, and force it to end. 2. Open the registry editor and go to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run. Check whether there is any suspicious program auto-start entry there, and if there is, delete it. 3. This still may not be enough; when you do something, do it thoroughly! We also need to check the Windows system configuration files. Find the file “Win.ini” under the Windows directory and open it. At the beginning you can see the following two lines: load= run= These are also auto-start entries. If there is a command line after the equal sign, then Windows will automatically run the specified program when it starts. Under normal circumstances there should be nothing after the equal sign. If there is a command line there, then it is very likely a trojan. So if there is a command line after the equal sign, you should delete it too. After the above three steps, the malicious script in your system will have been completely cleared out. Finally, don't forget to restart the system! But I suggest you also completely delete the files related to the malicious program from the system directory, so as to clean everything up.

Floor3　红色狂想	Posted 2003-08-22 00:00
金牌会员　Posts 1,501　Credits 4,289　From 河南省
If the “Run” item in the Start menu has been disabled, you can still browse the Windows system directory, right? If so, wouldn't it be enough to just run the program you need directly!

Floor4　cn_archer	Posted 2003-08-22 00:00
元老会员　Posts 991　Credits 2,903　From 福建省
If it really doesn't work, go to the Meiping website and download Meiping Internet Cafe Cleanup Expert. It'll be taken care of in no time.

Floor5　无妄★模拟	Posted 2003-10-14 00:00
初级用户　Posts 35　Credits 280
You can directly log in to 3721 Internet Real Name!! That'll solve it right away~~~~~~~~~

Floor6　无妄★模拟	Posted 2004-01-12 00:00
初级用户　Posts 35　Credits 280
You can use search to find REGEDIT (registry). After opening it, use CORL+F to search for POLICIES, then find the NORUN item and change it to 0. Press F5 to refresh, close the registry, and restart, and the “Run” option will appear.