how do i get rid of pop up on me xupitertoolbarloader

Hello bigsig:
I'm sorry to hear that you've fallen victim to this adware/scumware. 
These programs are surreptitiously installed into the computer when
the client installs a program with them bundled (for example:
virtually all the Peer-to-peer file-sharing programs).  In the case of
Xupiter, it is installed onto your computer through an ActiveX page
that you were unaware about.  The tactics that Xupiter employs are
similar to the tactics that Lop.com employed.  Fortunately, there are
software out there that will help you defeat this pest.

The best way to get rid of Xupiter is to download Lavasoft's ad-Aware,
available for free at http://www.lavasoftusa.com .  The software had
been updated to recognize Xupiter.  When you have installed the
program, run a scan of your whole system (that is, select all the
sections to scan, especially your registry).  When the scan is
complete, the program will present you a list of adware that it
detected.  Select all of them and then continue.  Note that if you
have Kazaa installed, don't select Cydoor or Gator or else Kazaa will
cease to function correctly.  Restart your computer and you should be
free of this pest.

If for some reason the previous method did not work, you can
alternatively try this:

1. Open the registry (from the Start menu, click Run and enter
regedit) and find the key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run.
Delete the 'XupiterStartup' entry in the Right Hand pane.

Also delete the following Registry Keys:

HKEY_CURRENT_USER\Software\Xupiter
HKEY_LOCAL_MACHINE\Software\Microsoft\Code Store Database\Distribution
Units\{A27CFCAE-9351-4D74-BFFC-21EB19693D8C}

Reboot, and delete the entire Program Files\Xupiter directory. 

You're also likely to have a Xupiter ActiveX object in your Downloaded
Program Files folder. Find that one, rightclick it, and choose
properties. It has the following ID:
{A27CFCAE-9351-4D74-BFFC-21EB19693D8C}

Now rightclick the file, and choose delete. 

Next, delete the Xupiter folder in Program Files. 

Finally, go to Internet Options/Programs, and hit "Reset Web
Settings".


I hope that this answered your question.  If you need clarification,
please ask for it before rating this answer.

Good luck exorcising this demon,
secret901-ga

source:
http://www.spywareinfo.com/newsletter/archives/september-2002/09212002.html

Search strategy:
Xupiter remove

---

Clarification of Answer by secret901-ga on 12 Oct 2002 22:09 PDT

Thank you getterry-ga and arcadesdude-ga for your inputs:
Ad-Aware had been updated to recognize this pest, according to the
link that was given in the answer.  If it doesn't, you can still
remove it manually by following the directions below.
secret901-ga

I must add that I too noticed this scumware pest on my computer. I
manually deleted it only to find it return later. So I deleted it
again, but this time I blocked the scumware/spyware/adware's site.

You can prevent getting this pest (which automatically installs
without your persmission) by doing the following:

1. Click Start

2. Click Run

3. Type notepad c:\windows\hosts

4. When the hosts file appears add these 2 lines and a blank line to
the bottom of the file:

127.0.0.1 xupiter.com
127.0.0.1 www.xupiter.com

5. Then save the file and restart Internet Explorer (or whatever
Internet Browser you are using).

The hosts file is a simple file used by the web browser to determin
which sites get redirected to what address. The address 127.0.0.1
means redirect to your computer which is effectivley like saying "do
not connect to this site," which is exactly what it does :)

That will prevent xupiter from reappearing on your computer.

By "determin" I meant determine of course.

I also was hit by this rather nasty POS.

I was manually removing the registry entries for it when it caused my
machine to try for a reboot.

I had a terminal application open at the time that asked if I was sure
I wanted to close the session, I didn't, and it stopped the shutdown.

Ad-adware did not find it last time I ran it.