re: belgiandip.com
Monday, March 22, 2004 at 5:07 pm
Windows XP Annoyances Discussion Forum
Posted by MrDroid
(1 messages posted)
I had this popup as well. Thanks for the info below; because of that I could run
my own searches for files and found some unmentioned (to my knowledge) files that
contain word "werule" in their source.
These files are:
egSTR.exe
SABASER.exe
I also found 'pup.exe' but I couldn't find 'over.exe' or 'dbcji32o.exe'. Maybe this
is because I have Windows ME.
However, just deleting 'pup.exe', 'egSTR.exe' and 'SABASER.exe' fixed my belgiandip.com
problem
Note: It may tell you that SABASER.exe is in use when you try to delete it. Just
restart Windows and do not run the internet until you delete SABASER.exe
The problem should be fixed, especially if you previously ran SpySweep like I did,
and delete the SABASER registry entry (use "Hijack This" to find it)
On Monday, March 1, 2004 at 12:23 am, Cyber Spyder wrote:
>I believe i have found an answer to your POPup problem.
>
>I too was getting the belgiandip popups after going to certain web pages, gotradio.com
>was one of them where i was bombarded with popups, browser hijackers, and my cd-rom
>drives all popped open. After doing some research i traced all problems back to
passthison.com
> where they openly admit doing these types of things to convince people to buy spyware
>removal tools from their advertisers. Long story short, I spoke to Val Starr,
president
>of gotradio.com and she had the advertisers removed along with their popup attack
>banners. Well they somehow did it again and now i started getting the belgiandip.com
>crap. Here is what i noticed:
>
>A program called pup.exe in the c:\prgram files dir was creating a file called
over.exe
>which in turn was causing popups. After deleting the files i thought i had the problem
>solved, WRONG.... Downloaded both spysweeper and adaware and neither one caught
this
>nasty little bastard. Opened task manager and saw no unusual tasks running. Decided
>to reboot, did, upon opening task manager again i noticed this little S.O.B. running
>dbcji32o.exe which if right clicked on and properties checked was codenamed totempole
>by some idiots called werule. The original filename is pup.exe... created by the
>dbcji32o.exe file So i hope this helps you and everyone else out because none of
>the spyware tools i tried could find this one.
>
>
>On Wednesday, December 17, 2003 at 4:01 pm, BT wrote:
>>Im getting a popup from Belgiandip.com that launches intermittently when Explorer
>>is started or shut down. Cant seem to control it through my firewall or popup stopper.
>>Does anyone know how to kill it?
- Written in response to:
- re: belgiandip.com (Cyber Spyder: Monday, March 1, 2004 at 12:23 am)
Responses to this message:
|
|
All messages in this thread [show all]
 |  |  | re: belgiandip.com (MrDroid: Mon, Mar 22, 2004, 5:07 pm) |
| |
| |
Return to the Windows XP Discussion Forum
|
|
