Windows Forum

Ask something
Discussion Locked

windows xp

0 helpful
6 replies

by edbd

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

When I opened msconfig to look at my start up items, I saw a folder named "Belt". Is that a folder that is supposed to be there or has it been placed there by a hacker or through the internet somehow? When I searched for the folder and it found it, it gives this description:
www.abetterinternet.com
Please advise.

6 replies

by joematus

I heard it's a spyware/adware program. It comes bundled with other software and loads itself secretly. Try downloading SpyBot and/or Ad Aware to clean out that crap. They're both free.

by heroshima

I concur with the prior statement, its a folder created by a malware or advertiser. It is most likely used for storage of the popups or plugins used byt the software. Downloading a spyware cleaner both of the ones mentioned are great freebies should do the trick.

by joseph moore

Sure sounds like spyware.
Me, I like Ad-aware to find/kill spwyare:
http://www.lavasoftusa.com

Also something good to have is Hijackthis:
http://tomcoyote.org/hjt/
It can analyze your browser, and tell you where the spyware is, and give you the option of removing it. You use this when the spyware scanners like Ad-aware cannot totally remove the spyware.

by joseph moore

After a little more digging, I found this:
http://tinyurl.com/xnxg
Adware.Binet
Adware.Binet is a Browser Helper Object that displays advertisements and downloads and installs files.
File names: Varies: Bi.dll and Biprep.exe; Belt.exe; Belt.ini; Belt.inf; Susp.exe; Susp.ini; Susp.inf

So, this is the spyware you have: Binet. Run Ad-aware, and see if it catches it and removes it. Reboot. Then run Hijackthis, and make sure the Browser Helper Object (BHO) for this is gone.
Good luck

by wlbowers

I use the following on a regular basis on my machine and when I do a clients machine.

Spybot
http://tinyurl.com/ziar

Ad-Aware
http://tinyurl.com/tek5

CwShredder
http://tinyurl.com/ysp9h

Hijack This
http://mjc1.com/mirror/hjt/

Remove spaces after copy and paste.

The first three use a definations file that tells them what to look for. Very easy to use.

Hijack This requires knowledge of what you are looking at in its list. You can remove the wrong thing using this utility.

Good Luck Lee

This discussion is closed to new replies.