Forum     

Go Back   Digit Technology Discussion Forum > Portables, Peripherals and Electronics > QnA (read only)
Register FAQ Calendar Mark Forums Read

QnA (read only) Mods please help transfer the contents of this forum to proper sections. :)


 
 
LinkBack Thread Tools Search this Thread Display Modes
Old 07-05-2005, 08:10 PM   #1 (permalink)
why need title?
 
bharathbala2003's Avatar
 
Join Date: Feb 2005
Location: CONFUSED!! AM LOST
Posts: 1,134
Default New Dot NET problem!!!


My MS ANTI SPYWARE deducted this today!

NewDotNet
Type: Browser Plug-in
Threat Level: Moderate
Author: New.net, Inc.




wat is this.. i have removed it.. wat else shld i do?
bharathbala2003 is offline  
Advertisements. Register and be a member of the community to get rid of them.
Advertisement

Old 07-05-2005, 08:46 PM   #2 (permalink)
Alpha Geek
 
vysakh's Avatar
 
Join Date: Sep 2004
Location: Old trafford
Posts: 860
Default

how did MS ANTISPYWARE deduct it ??

check if its removed completely
also try hijackthis
__________________
Incompatible message format
vysakh is offline  
Old 07-05-2005, 08:50 PM   #3 (permalink)
why need title?
 
bharathbala2003's Avatar
 
Join Date: Feb 2005
Location: CONFUSED!! AM LOST
Posts: 1,134
Default

lol okies.. i was in a hurry then i made a typo yes i have removed it.. anyway here is my log file..

Logfile of HijackThis v1.99.1
Scan saved at 8:49:58 PM, on 5/7/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
D:\WINDOWS\system32\pctspk.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\ZONELABS\vsmon.exe
D:\Program Files\Microsoft AntiSpyware\gcasServ.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
D:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\Program files\Yahoo!\Messenger\YPager.exe
D:\Program Files\Messenger\msmsgs.exe
D:\Program files\MSN Messenger\msnmsgr.exe
D:\Program files\Opera\opera.exe
D:\HT\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.thinkdigit.com/forum
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [gcasServ] "D:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [AVG7_CC] D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [Zone Labs Client] D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: &Google Search - res://d:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://d:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://d:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://d:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?link...67&clcid=0x409
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1109423309296
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab
O20 - Winlogon Notify: WB - D:\PROGRA~1\STARDOCK\OBJECT~1\WINDOW~1\fastload.dl l
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - D:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - D:\WINDOWS\system32\pctspk.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - D:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - D:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005\RpcSandraSrv.exe
O23 - Service: StyleXPService - Unknown owner - D:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - D:\WINDOWS\system32\ZONELABS\vsmon.exe
bharathbala2003 is offline  
Old 07-05-2005, 09:12 PM   #4 (permalink)
Alpha Geek
 
vysakh's Avatar
 
Join Date: Sep 2004
Location: Old trafford
Posts: 860
Default

your hijackthis logfile is perfect
no probs
so your system has to be good now
__________________
Incompatible message format
vysakh is offline  
Old 07-05-2005, 10:03 PM   #5 (permalink)
why need title?
 
bharathbala2003's Avatar
 
Join Date: Feb 2005
Location: CONFUSED!! AM LOST
Posts: 1,134
Default

well i had this dot net stuff but i removed it jus yday.. so i dunno how its commin again..
bharathbala2003 is offline  
Old 07-05-2005, 11:28 PM   #6 (permalink)
Human Spambot
 
swatkat's Avatar
 
Join Date: Mar 2004
Location: India
Posts: 2,033
Default

Go to Start> Run and type regedit and press ENTER. Then navigate to this key (by clicking "+" symbol infront of the keys):-
HKEY_LOCAL_MACHINE\Software\new.net
Then right-click on that Key and click "Delete". Exit from RegEdit. Then perform a scan using MS AntiSpyware, and post back whether it finds anything related to New.net or not.
__________________
http://swatrant.blogspot.com/
swatkat is offline  
Old 08-05-2005, 08:49 AM   #7 (permalink)
why need title?
 
bharathbala2003's Avatar
 
Join Date: Feb 2005
Location: CONFUSED!! AM LOST
Posts: 1,134
Default

@swat i dont have that key in my registry now.. yesterday when MS AntiSpyware detected it i deleted it..
bharathbala2003 is offline  
Old 08-05-2005, 09:18 AM   #8 (permalink)
Distinguished Member
 
anandk's Avatar
 
Join Date: Mar 2005
Location: Pune
Posts: 3,783
Default

new dot net is difficult to remove. make sure its not a start-up or running in your memory first. then run your ms antispy or adaware/spybot. then delete its residual folders in c/program files, if any.

visit : http://www.doxdesk.com/parasite/NewDotNet.html
__________________
> www.TheWindowsClub.com <
= www.WinVistaClub.com =
Microsoft® MVP
anandk is offline  
Old 08-05-2005, 12:02 PM   #9 (permalink)
why need title?
 
bharathbala2003's Avatar
 
Join Date: Feb 2005
Location: CONFUSED!! AM LOST
Posts: 1,134
Default

@anandk i have the LSPFix already.. and also removed the new.net dayb4 yday nite.. and yday nite during the auto scan it got detected.. i dunno the source still now.. but i got gud security suite..

AVG7.0,S&D,ZA,SP2,aSquared.
bharathbala2003 is offline  
Old 08-05-2005, 01:41 PM   #10 (permalink)
Human Spambot
 
swatkat's Avatar
 
Join Date: Mar 2004
Location: India
Posts: 2,033
Default

Is the MSAS still detecting the New.Net? Download this uninstaller and the run it.
__________________
http://swatrant.blogspot.com/
swatkat is offline  
Old 08-05-2005, 03:43 PM   #11 (permalink)
why need title?
 
bharathbala2003's Avatar
 
Join Date: Feb 2005
Location: CONFUSED!! AM LOST
Posts: 1,134
Default

no as of now MSAS hasnt detected it.. anyway i am downloadin the uninstaller..
bharathbala2003 is offline  
Old 08-05-2005, 03:48 PM   #12 (permalink)
Alpha Geek
 
vysakh's Avatar
 
Join Date: Sep 2004
Location: Old trafford
Posts: 860
Default

{off topic]
u still dont know the spelling bharath

its detected
__________________
Incompatible message format
vysakh is offline  
 

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


 
Latest Threads
- by clmlbx
- by tkin

Advertisement




All times are GMT +5.5. The time now is 06:08 PM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.

Search Engine Optimization by vBSEO 3.3.2