How to remove New.Net

nomadd · May 3, 2005

I am wondering how do I go about removing New.Net. I have run spybot s/d and this has not removed it. I keep checking the boxes in my HJT log but it tells me that it can't remove it, and that
Spybot S/D will. Any suggestions?

Nomadd

chaslang · May 3, 2005

First try fixing a bug in Spybot.

Fixing SpyBot's Ignore Products Bug:
I want you to run SpyBot and get into the Advanced mode by selecting Mode and then
Advanced mode. Then select Settings and the in the left column select Ignore Products.
In the right window pane make sure the All products tab is selected. Then in that
window, right click your mouse and choose "Deselect all". Now in the left pane click
at the top on SpyBot S&D and then choose Search for Updates. Download any updates
required. Now click Check for Problems. Fix any that are found.

Let me know if it now finds and fixes New.Net.

killian_sh · May 3, 2005

There is a bug in Spybot that tells the program to ignore New.net.To correct this open Spybot and click on Mode>Advanced Mode>Settings>Ignore Products.Then scroll down and make sure New.net is NOT checked,if it is uncheck it and run the scan again.

killian_sh · May 3, 2005

I also found this:
To remove New.net please follow these steps:

1. Click on start, then settings and then control panel.

2. Double-click on the Add/Remove Programs icon.

3. Look through the installed programs for a program called New.Net or NewDotNet.

4. If there is no uninstall program listed then do the following:
1. Go to www.newdotnet.com/removal.html
2. Scroll down to Procedure 4and follow the removal instructions.

Once the computer has rebooted, start HijackThis and fix any of the corresponding entries for that program that are found.

Then reboot and delete the C:\Program Files\NewDotNet\ directory.

chaslang · May 3, 2005

killian_sh said:

There is a bug in Spybot that tells the program to ignore New.net.To correct this open Spybot and click on Mode>Advanced Mode>Settings>Ignore Products.Then scroll down and make sure New.net is NOT checked,if it is uncheck it and run the scan again.
Click to expand...

Did you happen to read what I posted in message # 2????

nomadd · May 4, 2005

Ok, I changed the prefrences, and ran it again. It says that it cleaned out New.Net but when I run HJT it says that there are four entry's showing new.net, and when I try to remove them it says that it can't remove them. Any other suggestions? I will post my HJT log if you need it.

Thanks

Nomadd

killian_sh · May 4, 2005

chaslang said:

Did you happen to read what I posted in message # 2????
Click to expand...

Yes I did,but only after I posted.I'm sorry,you posted while I was writing.It wasn't my intension to step on anyone's toes.

chaslang · May 4, 2005

nomadd said:

Ok, I changed the prefrences, and ran it again. It says that it cleaned out New.Net but when I run HJT it says that there are four entry's showing new.net, and when I try to remove them it says that it can't remove them. Any other suggestions? I will post my HJT log if you need it.

Thanks

Nomadd
Click to expand...

Where there is one problem our experience has taught us there are others. We have procedure we prefer to have followed to get PC's into a know state before we look at HijackThis logs. So please follow the steps below which end in posting a HijackThis log if you still have a problem afterwards. Make sure you follow the guidelines exactly for installing, running, and posting your HijackThis log. If you have no other problems than newdot.net, the cleanup should be pretty simple.

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus RemovalMake sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

nomadd · May 9, 2005

I have run all the scan's from READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Remova that is how I found out that I had the new.net thing. I am sorry if I didn't state that in my first post. I will run everything again, that is not a problem.

Again thanks for all the help

nomadd

chaslang · May 9, 2005

nomadd said:

I have run all the scan's from READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Remova that is how I found out that I had the new.net thing. I am sorry if I didn't state that in my first post. I will run everything again, that is not a problem.

Again thanks for all the help

nomadd
Click to expand...

If you have run it already, you do not need to repeat it. Just follow the steps in my previous message for posting a HijackThis log and attach one.

nomadd · May 16, 2005

Sorry about not getting back to this thread sooner, it has been a little chaotic for me latley,but here is the HJT log. I even ran all the scans again and it still is there. I must be missing something.

Thanks for the help

chaslang · May 16, 2005

You installed HJT where specifically requested not to install it, the Desktop.
C:\Documents and Settings\Alisha Floresca.ALISHA-QBDG9X5Y\Desktop\Spyware Cleaners\hijackthis\HijackThis.exe

Please install it properly before continuing.

Download LSP - Fix just incase the removal of new.net breaks your connection.

If after removing NEWDOT,NET (in the below steps) you lose your internet connection
- Disconnect from the Internet and close all Internet Explorer Windows.
- Run LSPFIX and Check the "I know what I'm doing" Button and click ‘Finish’ (only do this if you lose your internet connection after following the below steps)

If you are using WinXP or WinMe, make sure you have system restore disabled (per the tutorial).
For all OS types, make sure viewing of hidden files is enabled (per the tutorial).

Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,NewDotNetStartup -s
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net

After clicking Fix, exit HJT.
Boot into safe mode and use Windows Explorer to delete:
C:\Program Files\NEWDOT~1 <--- the whole folder

Now run Ccleaner (installed while running the READ ME FIRST). Now if running Win XP goto c:\windows\Prefetch and delete all files in this folder.

Now reboot in normal mode and post a new HJT log. And tell us how things are working.

nomadd · May 17, 2005

Sorry about posting the wrong HJT log, I had it saved in it's own folder just ran the wrong program. I think that it is cleared out this time, re ran everything and it looks good, but here is the new HJT log

Again thanks for everything

nomadd

chaslang · May 17, 2005

You're welcome! Your log is clean. Now check out the below to help keep it that way:

How to Protect yourself from malware!

Log in or Sign up

How to remove New.Net

nomadd Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

killian_sh Private E-2

killian_sh Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

nomadd Private E-2

killian_sh Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

nomadd Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

nomadd Private E-2

Attached Files:

hijackthis.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

nomadd Private E-2

Attached Files:

hijackthis.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member