Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I cannot open Windows Media Player. Instead
BDL84126.exe tries to access the internet. I have used Adaware, PestPatrol & Spybot Search & Destroy to no avail. Also when I delete all references it comes back.Another problem is "winpup" another one that keeps hanging around.
I would appreciate it if anyone has any info regarding this.
Thank you.

I have a similar problem. I noticed that the Windows Media icon had changed and now appeared in the quick-launch tool-bar. I clicked on the new Windows Media icon and my Kerio firewall told me that bld84126.exe was trying to communicate with a remote computer.
I ran my AVG anti-virus scanner and it found TROJAN HORSE DOWNLOADER.VB.EC in C\WINDOWS\PUP.exe and C\WINDOWS\SYSTEM32\PUP.exe. It qurantined the trojan but I haven't fixed Windows Media yet.
John Dekker
"Life, itself, is the ultimate religion."

I went to control panel and clicked on add/remove programs. Then I clicked on add/remove windows components and unticked Windows Media Player. I then reinstalled WMP and the critical update(KB828026) from the Microsoft site and now it seems to work again.
John Dekker
"Life, itself, is the ultimate religion."

this EXACT same thing happened to me just 10 minutes ago.
Except, when I ran the Virus Checker, all was fine, no viruses. I did a system restore to an earlier restore and things seem fine now.
Does anyone have any idea what on earth is going on? I NOTICE THIS EARLIER POST WAS POSTED JUST A FEW HOURS BEFORE I HAD MY NEAR INDENTICAL PROBLEM... Weird.
Oh, I had one other thing happen too. I kept getting a message: YOU NEED TO REBOOT TO COMPLETE THE UPDATE, or something like that.
I anyone has any ideas, PLEASE E-MAIL ME at
ABROMANOV@YAHOO.COM
thanks

Hey, I recently had this problem as well
and just thought I would post some
information about what bdl84126 does
and how to get rid of it.It appears to be a dataminer for some fort
of ad program, I tapped into its
communications to its host server (sorry I
dont have access to my log files atm so I
cant tell you which site it was) and
procedes to transmit a list of every major
program you have a registry key for. (It
does not transmit the data within the key,
only the name, such as "Norton Antivirus".The removal process is fairly
straightforward, although it can be
somewhat annoying. First off, start your
computer in safemode (usually F8 while
windows is loading to access the menu
that lets you do this). Once your booted
up, use the control panel add/remove
programs function to remove anything
pertaining to Microsoft Windows Media
Player. For me this was a security update
and the WMP 9 update itself. Once you've
done this, you can just go in and delete
the BDL84126.exe file, reboot to normal
mode, and use the windows update site
to get a clean installation of WMP. And
that should be the end of your problems.I also saw a mentioning of the
winpup.exe file. I found the same thing
when I first noticed i had BDL84126, so I
think they might be getting into systems at
the same time, though I'm not really sure.
I took care of pup by booting to safemode
and running AdAware 6 (free version from
download.com or their website is fine).
Just make sure you have updated the
definition files using the in program
update option. (For those of you
unfamiliar with AdAware, if it finds Cydoor,
you might not want to select it for deletion
as it can make programs such as Kazaa
cease functioning, but removing pup is
ok)Hope this info helped some of you, and I
hope even more we will see some
updates to our firewalls and antivirus
programs soon to keep this from coming
back.

Just sharing my experience. I got this problem on the 10th of April as well, but only got around to it now.
I had the same exact problem (excluding the "winpup?" problem) but have no idea how I got it in the first place. I used NAV and went to SARC to get info but nothing on both. I have my virus definitions updated daily as well. Googled and only found 2 links for the .exe file, one of which was in Greek, so I guess this problem isn't as prevalent as I thought.
I followed what was suggested. I had a Hotfix for WMP9, removed that in safe mode, but incidentally Windows gave me a message about can't finding the Uninstall folder or something. I retried a couple times and it went through. Still in safe mode, I then deleted both instances of bdl84126.exe (I only had 2), one in Windows, and the other in Windows\Prefetch. Rebooted into XP and problem was still there. I went into Add/Remove, and went into "Add/Remove Windows Components" and removed Windows Media Player. Then I went to Win Update and dled the critical update WMP7.x hotfix, then after that was installed, added and installed WMP9. Problem was fixed. In short:
1. Safemode (maybe not necessary)
2. Add/Remove Programs>>WMP related Hotfixes
3. Add/Remove Windows Components >> WMP
4. Delete all instances of bdl84126.exe (use Search to find them)
5. Go to Windows Update, reinstall the Hotfix for WMP7.x series
6. Again in Win Update, reinstall WMP9
7. Reboot (maybe not necessary)Hope this helps anyone else with this problem.

Same problem:
Followed similar procedure to above, except Safemode and Reboot:
1. Add/Remove Programs>>WMP related Hotfixes
2. Add/Remove Windows Components >> WMP
3. Delete all instances of bdl84126.exe (use Search to find them)
4. Go to Windows Update, reinstall the Hotfix for WMP7.x series
5. Again in Win Update, reinstall WMP9In addition, I did:
6. Run AdAware 6 with latest definition and get rid of WINPUP32 from c:\windows\pup.exe
Thanks for all your infos, it was of great help.

Addenum to my post.
I was too quick to say what I said. Came back here a bit earlier and re-read the thread. I DO have the pup.exe in C:\Windows as well after all.
Promptly went to Lavasoft, dled and installed Adaware 6.0 and removed pup.exe as well.
<slightly OT>
Incidentally I didn't have any Adware removal programs installed till now and found a few more lurking on the system. Hi-Wire was one of them. AFAIK it's related to streaming radio but I got rid of it anyway. Also more than 120 trackers and 2 'bad' favorites bookmarks was found. I was shocked.Paranoid now, I dled and installed SpyBot as well, and found, out of all things, GATOR on the system. I've never used anything even remotely tied to it, yet I still have it on the system. Also about 20 more MS related "holes" as well was found. This is done after all the (~130 items) were taken care of by Adaware.
I really wonder now, is there other programs that catch things that these 2 missed?
Also, is removal of Hi-Wire bad for the system? So far I have not noticed anything wrong.

Thanks to all for the wonderful solutions.
I finally removed the pup.exe and bdl84126.exe and reinstalled WMP.
Everything is OK now.
Many thanks.

I did all the things you guys said, and removed the hotfixes and the instances of the program, but i cant seem to find the media player to uninstall it. i went into the add/remove windows componets and its not in there. it is also not in the regular part of the uninstaller. i tried manually deleting it but something keeps replacing the files. what should i do now?

Nick,
Manually deleting bdl84126.exe won't do you any good. It'll just replicate itself later from the registry.
If you are in Add/Remove Windows Components, WMP should be listed in "Windows Componets Wizard" as Windows Media Player in the bottom of the list. It should not be listed in the regular Add/Remove Programs list. Just making sure, are you:
Running XP?
Running WMP9?
Running the system with an Admin acct.?Also,
1) did you do something to WMP already? (i.e. installing Win MediaPC compatibility patch)
2) other viruses/adware/problems on the system? If so, maybe you should install and run Adaware and SpyBot first and get rid of other problematic things (like the pup.exe in your C:\Windows) first. Let us know what comes out of it.

Just got this virus off my roommate's computer last night. One thing I didn't see mentioned here is System Restore. If you're running XP and remove this virus with the anti-virus program of your choice, you haven't really gotten rid of it! Windows keeps a copy of it in an inaccessible folder called System Restore. Here's the skinny:
1. Right click my computer and choose "properties"
2. Click the "System Restore" tab (you must have admin status for this tab to appear)
3. Check the "turn off System Restore" box and click "ok"
4. Run your virus scan as usual
5. Go into the C:/Windows Media folder and delete mediaplayer.exe and wm_player.exe... this virus disguises itself as Media Player
6. Reinstall Media Player
7. Turn System Restore back on using steps aboveYour system should now be clean. In my roommate's case, even after AVG removed the virus, clicking on the Media Player icon or shortcut tried to launch it again. The steps above removed it completely from his system.
Hope this helps,
Joe

This is really nasty for those on an office computer without admin privileges. Is there any service that can clean this yet?
I cannot even delete the Windows media Player to start over. Everything replicates itself. Even after downloading the microsoft patches.
The redirect when I try to initialize Media Player is to some Belgian website. Two or three popups come on that can't be read.
Has Microsoft figured this one out yet?

Panoots,
Today MS released 5 Critical Updates, at least I think they are new (maybe what I have been doing reversed some things, but I don't think so, I run Win Update like 5 times a day recently). Try those first, a couple of them might help. These are the five I got:
- Cumulative Security Update for Outlook Express 6 SP1 (KB837009)
- Critical Update for IE6 SP1 (KB831167)
- Security Update for WinXP (KB837001)
- Security Update for WinXP (KB828741)
- Security Update for WinXP (KB835732)The last 3 "might" help you. Otherwise I guess you can ask your IT guy to either fix it or at least give you admin privies for the moment till you fix the problem.

i got that damn pup thing around april 10 too... from some flash game site,,, so bad i use opera for like a year, but then i try myie2 this month and i got the damn virus even i have firewall and avg running...
i didnt uninstall the hot fix or uninstall anything.. i just run the file mpsetupxp.exe in windows media player folder and reinstall media player then everything works again.
but the problem is i cant play some *.asf files and the option to choose the audio channel in either media player 6.4 or 9 is gone !!! how to fix that?? i need that to play some movie file.. some movie files use left channel and right channel to play different languages...
i have vlc player to solve the channel problem, but sometimes i want to use media player to play movies... anyone help me?

Not being able to open WMP is only the latest of symptoms I have experienced. I did the removal and reinstall also and it worked, for a couple of days.
I have been chasing my Adware/Spyware problem for well over a month with no success. I run AdAware and Spybot S&D and both will come up with crap that needs to be removed. It all seems to be cleaned up but everything comes back when I reboot. The one thing I can never remove which AdAware sometimes recognizes is a random file in my C:\_Restore\ folder called something.cpy.
I have unchecked offending programs from the startup file in MSConfig, but more are created with different names, now when I boot up I get about a dozen error messages saying that the file pointed to by morze1.lnk (or some other gibberish) could not be found.
I have tried removing offending registry entries from regedit only to have them reappear on reboot.
I am getting very frustrated (I've been working on it most every night for over a month).
Anybody else go through this and find resolution?
Thanks!
BTW, running Windows ME :(

Thank you for making this forum. I couldn't find bdl84126.exe on my hard drive, so I restarted in safe mode, used Adaware 6.0, and didn't find any malicious files. I then restarted in regular mode, and decided to overwrite the wm player file on my hard drive. I went to:
C:\Program Files\Windows Media Player\Installer
and clicked on the setup file. It reinstalled WMP 9 for me, and overrode the old one. All playlists/the library/files, etc. are intact. I hope it stays this way. Thanks!
You won't know until you find out!

so does anyone have solutions or any anti-virus to fight these b---tards??
i reboot my computer and running adaware now, 1 registry found again, still scaning.
i goto ms windows update and 2 security updates fail, would this be possible the virus blocking it?

I used Ad-aware 6.0, click setting and under memory and registry check everything. After I did that and ran Ad-aware it detected everything. I was then able to remove bdl84126.exe (it didn't come back after I rebooted). I then reinstalled Windows Media Player.
Now I use Ad-Aware 6.0, PestPatrol, Spybot S&D, and Spyware Blaster www.spywareblaster.com.
This was my first real experience with Spyware and I'm glad it's over.
Thanks to all.

re: BDL84126.exe
***
Everytime I access my bookmarked webpage on 150m.com or try to work on it, I get zapped with error messages & BDL84126.exe tries to do its thing into my computer (this happened once already. WHAT A PAIN!)***
Is it possible 150m.com is INFECTED with this BDL84126.EXE? Should I just stay off it?I have updated NAV, as well as my NORTON FIREWALL turned up all the way. I also have AdAWARE, which I just updated yesterday.
Am I protected? Do I need to stay away from 150m.com?
***
TO EMAIL ME, please TAKE OUT "2004_nospam" from my e-mail.thanks!

Hey,
I just got finished taking care of this problem, thanks to all the comments here!
I ended the bdl processes in Task Manager, then uninstalled the WMP hotfix and WMP, then downloaded the newest player from the microsoft web site. Ran Ad-Aware after all of this and finished cleaning up.
My Norton Anti-Virus did not find it. Ad-Aware 6.0 found the pup.exe after I changed the options as suggested by Joy - message 18.
Thanks for all the help y'all

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |