Re: newdotnet adware

From: Jim (qwixdraw_at_xxxmsn.com)
Date: 01/23/05


Date: Sun, 23 Jan 2005 17:14:50 -0500

Thanks for the tips David, but I've already cleaned my system of
'Newdotnet'. It was difficult though. It apparently embeds in system32, and
leaches onto IE. When Spydoctor tries to delete it, NT shuts down the system
for restart. To eliminate it, I had to change the file from read only, and
remove protection from protected files in msconfig. But when I deleted the
Netdotnet file it also deleted some of the required files for IE. It
disabled internet access until I rebuilt the system.
I aquired this malware from a free cd/dvd burner available on 'download.com'
. It had a 96% approval rating. I did read the 4% disgruntals and they
informed me of this malware. But, being the knowitall of the 21st century, I
figured to clean it out after the download. ....Major mistake, I don't the
burner anyway, I just wanted to look at it. ,,,,,,Always, Jim
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:ek5FmmAAFHA.208@TK2MSFTNGP12.phx.gbl...
> You can try the following...
>
> 1) Download the following three items...
>
> Trend Sysclean Package
> http://www.trendmicro.com/download/dcs.asp
>
> Latest Trend Pattern File.
> http://www.trendmicro.com/download/pattern.asp
>
> Adaware SE (free personal version v1.05)
> http://www.lavasoftusa.com/
>
> Create a directory.
> On drive "C:\"
> (e.g., "c:\New Folder")
> or the desktop
> (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
>
> Download Sysclean.com and place it in that directory.
> Download the Trend Pattern File by obtaining the ZIP file.
> For example; lpt363.zip
>
> Extract the contents of the ZIP file and place the contents in the same
> directory as
> sysclean.com.
>
> 2) Update Adaware with the latest definitions.
> 3) Disable System Restore
> http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
> 4) Reboot your PC into Safe Mode and shutdown as many applications as
> possible
> 5) Using both the Trend Sysclean utility and Adaware, perform a Full
> Scan of your
> platform and clean/delete any infectors/parasites found.
> (a few cycles may be needed)
> 6) Restart your PC and perform a "final" Full Scan of your platform
> using both the
> Trend Sysclean utility and Adaware
> 7) Re-enable System Restore and re-apply any System Restore
> preferences,
> (e.g. HD space to use suggested 400 ~ 600MB),
> 8) Reboot your PC.
> 9) Create a new Restore point
>
>
> * * * Please report your results ! * * *
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
>
>
>
>
> "Jim" <qwixdraw@xxxmsn.com> wrote in message
> news:%23h5ZFeAAFHA.3256@TK2MSFTNGP11.phx.gbl...
> | Is there a easy way to get rid of this malicious software? ...J
> |
> |
>
>



Relevant Pages

  • Re: newdotnet adware
    ... "David Candy" wrote in message ... > figured to clean it out after the download. ... Reboot your PC into Safe Mode and shutdown as many applications as ... Re-enable System Restore and re-apply any System Restore ...
    (microsoft.public.windowsxp.general)
  • Re: aim.exe virus?
    ... detect a threat in the "loveyou.scr" file. ... David H. Lipman wrote: ... > 1) Disable System Restore ... > 2) Reboot the PC into Safe Mode ...
    (microsoft.public.windowsxp.general)
  • Re: Problem with MS_Services2.exe
    ... > Download the Trend Pattern File by obtaining the ZIP file. ... > 3) Disable System Restore ... > 8) Reboot your PC. ... Is this a spyware problem or not. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: TGCMD.EXE
    ... and when I try to re-install the Ethernet controller by removing it from ... Otherwise I'll just use modem to download updates for the ... > 3) If you are using WinME or WinXP, disable System Restore ... > 4) Reboot your PC into Safe Mode ...
    (microsoft.public.win2000.general)
  • Re: I know there is somthing wrong!
    ... > Download the Trend Pattern File by obtaining the ZIP file. ... > 3) If you are using WinME or WinXP, disable System Restore ... > 4) Reboot your PC into Safe Mode ... > | explorer search bar, when I try to use it to search for somthing say like ...
    (microsoft.public.security.virus)