Hi
Will you first move HJT from the desktop and put it in a folder of its own...
You will then need to go and remove NEW.NET via Add/Remove......
After that....
Make sure you have already run Adaware, Spybot S & D(check for updates) as these will do a preliminary clean first.Some files below may not be present after running the above programs.
Then....
Turn off your System Restore
SEE HERE Reinstate it when your log is cleaned and then create a new restore point.Close your browser window and run hjt in safe mode...
HOW TO RUN SAFE MODE and have "Hijack This" fix all the following items by placing a check in the appropriate boxes and selecting "fix checked".
Folders that have been highlighted in RED will need to be uninstalled.Check first as some folders maybe uninstalled via the Add/Remove program. Files highlighted in BLACK will need to be removed from your hard drive. Make sure to have your system set to show hidden files and folders..
HOW TO SHOW FILES ..Please post a new log when finished...
O2 - BHO: C:\WINDOWS\lbbho.dll - {36D6F271-E8CC-41DC-B2F7-44B8AEF86967} - C:\WINDOWS\
lbbho.dll
O2 - BHO: CATLEvents Object - {3EC8E271-FAB9-418a-8A8E-65AEB4029E64} - C:\DOCUME~1\JOHNDI~1\LOCALS~1\Temp\
sm.dat
O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\
NewDotNet\newdotnet6_38.dll
O2 - BHO: CATLEvents Object - {60112085-E1CE-4e0e-823A-EBB1AD98804C} - C:\DOCUME~1\JOHNDI~1\LOCALS~1\Temp\sm.dat
O4 - HKLM\..\Run: [Kazaa Download Accelerator Updater] regsvr32 /s C:\WINDOWS\System32\
kdpupd.dll
O4 - HKLM\..\Run: [ms] C:\WINDOWS
\ms.exe
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
O4 - HKLM\..\Run: [*utilas] C:\WINDOWS\security\Database\
utilas.exe