New.net

can any spyware program get rid of it?

[cmatcme]

Does anybody know of any anti-spyware program which can get rid of New.net. Whenever we uninstall it always reinstalls itself in the regsitry and brings up a rundll32 error!

Anybody?

cmatcme

[specter]

Try "Spy bot" last release (updated!)

Delete all your cookies,off line content and temporary files and increase your privacy protection:
Do no trust any cookie until the problem solved.

Have you installed a good firewall? I will be a very good thing.

Hope to be useful.

[cmatcme]

Have you installed a good firewall?

Yep, got Norton. <added> AND WINDOWS FIREWALL </added>

______

Downloading spybot now from ejrs.biz, good mirror?

cmatcme

[edited by: cmatcme at 11:59 am (utc) on April 10, 2005]

[specter]

It's not important the mirror,as you will have to update the software before the scan ;and when you do that it finds the best mirror by itself.

[cmatcme]

Picked up tonnes of things Microsoft didn't pick up. New.net not to be found!

Other recommendations?

---

I've got 2 propositions to get by way around this:

1. Download another ant-spyware program
   
2. "Remove" New.net with Microsoft Anti-Spyware and create a fake .dll in the new.net directory

At the moment I inclined to go with point 2 but if I do, I see 2 problems:

1. Bad dll error when Windows starts
   
2. New.net takes advantage of me leaving it alone and other a period of time reproduces itself and overwrites my fake dll and this problem starts all over again

Both I want not to happen, is there a chance of any occuring?

To create fake dll

Open notepad.exe

File -> Save -> name.dll

Close notepad.exe and enjoy

cmatcme

[edited by: cmatcme at 12:55 pm (utc) on April 10, 2005]

[EVOrange]

I use MS new spyware program, AdAware, Pest Patrol and Spybot and all of them will catch some the others miss.
It's important though that if you are on WinXP to purge your restore data as many times the pest is there and reinstall from there.

To purge, turn off restore, reboot and run your spyware programs then turn the restore function back on.

EVO

[cmatcme]

Mmmm. Turning system restore off won't delete any restore points I have active will it?

This is my routine if it doesn't:

- Create restore point with new.net active
- Turn off system restore
- Delete spyware with Microsoft's and manually delete startup registry
- Reboot
- Watch the spyware not startup and no error messages appear
- Run a scan to see if spyware has or hasn't reinstalled
- Turn on restore after a happy 3 hours

(Alternatively I'll create a fake dll file where I delete the registry)

Is that OK and doable?

cmatcme

[Woz]

Try HijackThis, which will inspect your registry and allow you to delete suspicious entries. Use with care though.

Onya
Woz

[longen]

>>Turning system restore off won't delete any restore points I have active will it?

All previous restore points will be deleted.

[flashgc]

Yesterday we had a customer who had spent nearly three hours on the phone with various ISP tech support folks who ultimately told him "Your browser is broke. Take the PC to someone who can fix it." He couldn't hit the internet at all though all settings looked normal enough. He brought it to us and a quick looksee told the story. He had installed and removed NEWDOTNET. Removing NEWDOTNET hammers the networking part of your PC because all it's parts aren't properly registered with Windows so removal can't happen gracefully. Hijack This restored his networking functionality in short order. Hijack This is available from Merlin's site as well as at Download.com and probably Major Geeks too.

Please note: Hijack This is a powerful tool for good in the right hands. A novice can right readily hose the machine though. We don't reccomend it for EVERYBODY.

[cmatcme]

Welcome to Webmasterworld flashgc [webmasterworld.com]

Thanks for the advice flashgc and Woz. I'll download it.

Would creating a fake dll in the newdotnet directory [ %ProgramFiles%\Newdotnet\ ] work. At the moment I'm pro that solution, is it OK and will it work?

Should I just try it?

cmatcme

edited english

[kwngian]

Why don't you just unregister the dll file using the command regsvr32 /u followed by the dll file name?

You will need to locate the newdotnet dll file location then type c:\windows\system32\regsvr32 /u c:\progra~1\netdotnet\whatever.dll

Can also try looking in c:\windows\downlo~1 for recently created files there.

List the files by typing dir /od (order by date), check the newest files found and unregister them.

[cmatcme]

Whoohey! It's gone forever, hopefully!

cmatcme

How do you spell whoohey anyway?

[Chndru]

all these spybot programs are just a patchwork.

get a good browser (aka Firefox or Opera) and use commonsense before d/ling. ;)