View Single Post
Old 07-13-2005, 04:51 PM   #2 (permalink)
skate_punk_21
1337 C0D3R
 
skate_punk_21's Avatar
 
Join Date: Mar 2005
Location: Canada
Posts: 1,460
OS: Server 2K3/XP Pro/XP MCE/Win 98/Ubuntu Linux/BackTrack 2

My System

And We're Back!

Please print out or copy this page to Notepad in order to assist you when carrying out the following instructions.

Notes
welcome to TSF dude! how is your room down the hall!? lmao!
Lets get cracking!!

also you are running hijack this from a temp folder. please move it to a stationary folder like C:\HJT, this just in case we have to run a cleanup, we dont want our backups to be removed as well....


Downloads
Download LSPFix.exe to a convenient location. Do NOT run this program. This is only to be used if you lose Internet Access after removing NewDotNet.


View Hidden Files and Folders
Go to My Computer >Tools >Folder Options >View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing / visible. Uncheck the Hide protected operating system files option.


Stop Potentially Runnning Processes
Go into HijackThis->Config->Misc. Tools->Open process manager. Select the following and click 'Kill process' for each one if they are still listed (they shouldn't be - but double check):



Potential Uninstallations
Click > Start > Control Panel > Add / Remove Programs and uninstall the following programs:

New.Net Applications or New.Net Domains (anything that says New.Net)

NOTE: If it is not there, go here and follow Procedure 4: NewDotNet


Boot Into Safe Mode
Reboot your system in Safe Mode (By repeatedly tapping the F8 key until the menu appears).



Start HijackThis Fix
Open Hijack This and click on Scan. Check the following entries (make sure you do not miss any)

O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net

Please remember to close all other windows, including browsers then click Fix checked.


File/Folder Deletions
Delete the following Files indicated in RED and Folders indicated in BLUE if they still exist.

C:\Program Files\NewDotNet\


Reboot your system in Normal Mode.


Further Scanning
Please run a Scan at any 2 of the Following sites
Symantec/Norton
Trend Micro
BitDefender On-Line Virus Scan
Panda ActiveScan
F-Secure
Kaspersky

Make sure that you choose the "fix" or "clean" option when available


Please post a fresh Hijack This log so that we can check if your system is clean.


***********************************************************************************
In the event that you lose Internet access...
Should you lose internet access after removing New.net, please double-click LSPFix.exe that you downloaded earlier. You will see 2 panels. If there is any file listed in the "Remove" panel on the right-side, leave it as is and just click "Finish>>" then reboot your computer and you should now have access to the Internet. If nothing is listed under the "Remove Panel", do NOT do anything - just close the program. You will need to use another computer to come back here for further instructions on what to do.
__________________
Have I Helped you? Please Consider a Donation to TechSupportForums

Last edited by skate_punk_21; 07-13-2005 at 05:01 PM.
skate_punk_21 is offline