Trojan Horse

I scanned my computer and I received a message that I have an infected file.
The file is C:\Program Files\NewDotNew\newdotnet3_88.dll, my back-up copy.
How can I repair this?

From: "summer" <>

| I scanned my computer and I received a message that I have an infected file.
| The file is C:\Program Files\NewDotNew\newdotnet3_88.dll, my back-up copy.
| How can I repair this?


There are anti virus News Groups specifically for this type of discussion.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus


Download WinsockFix
http://www.tacktech.com/pub/winsockfix/WinsockFix.zip

Download and install Ad-aware SE (Free personal version)
http://www.lavasoftusa.com/

Update Ad-aware SE with the latest definitions the quit the program.

Extract WinsockFix.exe and save it to the DeskTop.

Dump the contents of the IE Temporary Internet Folder cache (TIF)
Start --> Settings --> Control Panel --> Internet Options --> Delete Files

Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear


Download CLEAN.EXE from the URL --
http://www.ik-cs.com/programs/virtools/clean.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter
{ http://kixtart.org Kixtart is CareWare } three batch files, two Kixtart scripts, two Link
(.lnk) files and a PDF instruction file.

GETFILES.BAT -- For downloading (FTP) the files needed to run the McAfee Command Line
Scanner. You may have to disable your FireWall or allow FTP.EXE to go through your FireWall
to allow the FTP utility to download the needed files

CLEAN.BAT -- For running within Windows after running c:\mcafee\GetFiles.BAT. If you choose
to scan again at a future date, run this batch file. It will automatically check the date
of the McAfee DAT files and if it is a couple of days old, it will download (FTP) the latest
signature files and install them before performing the scan.

DOSCLEAN.BAT -- For use on a Win9x/ME PC or on a Win2K/WinXP PC that is using FAT32 after
you have booted from an Emergency Boot Disk or DOS disk and have already executed;
c:\mcafee\GetFiles.BAT from within Windows. DOS disk boot images can be obtained from;
http://www.bootdisk.com/bootdisk.htm

I need you to perform the following...

Execute; CLEAN.EXE
Choose; Unzip
Choose; Close

Execute; c:\mcafee\GetFiles.BAT
{ or Double-click on 'GetFiles Link' in c:\mcafee }

Reboot the PC into Safe Mode [F8 key during boot]

Shutdown as many applications as possible !
It would also help for you to read - "How to perform a clean boot in Windows XP"
http://support.microsoft.com/kb/310353

Execute; c:\mcafee\CLEAN.BAT
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.
It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.

Execute Ad-aware SE and perform a complte deep scan of the computer and remove any/all
parasites found.

Execute WinsockFix.exe which you saved to the desktop it and choose "Fix".

Reboot your computer to normal mode and you should have a clean PC.


* * * Please report back your results * * *

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

NewCrapNet is not classified as a virus (although, debatably, it should be),
and very few AV's will detect or remove it, sine it almost always is
installed with the user's (perhaps ill-informed) consent.

First thing is to use the uninstaller - and then to use every crapware
remover that you can think of!!

The uninstaller does actually work - but not completely, or terribly well,
particularly if the user has already run various crapware removers.

NewCrapNet is pernicious, deceptive, and generally unnecessary - and should
be avoided by any self-respecting PC user.

(and if the NewCrapNet monitor is watching - sue me!)


--
Noel Paton (MS-MVP 2002-2005, Windows)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:%...
> From: "summer" <>
>
> | I scanned my computer and I received a message that I have an infected
> file.
> | The file is C:\Program Files\NewDotNew\newdotnet3_88.dll, my back-up
> copy.
> | How can I repair this?
>
>
> There are anti virus News Groups specifically for this type of discussion.
>
> microsoft.public.scripting.virus.discussion
> microsoft.public.security.virus
> alt.comp.virus
> alt.comp.anti-virus
>
>
> Download WinsockFix
> http://www.tacktech.com/pub/winsockfix/WinsockFix.zip
>
> Download and install Ad-aware SE (Free personal version)
> http://www.lavasoftusa.com/
>
> Update Ad-aware SE with the latest definitions the quit the program.
>
> Extract WinsockFix.exe and save it to the DeskTop.
>
> Dump the contents of the IE Temporary Internet Folder cache (TIF)
> Start --> Settings --> Control Panel --> Internet Options --> Delete Files
>
> Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
> Tools --> Options --> Privacy --> Cache --> Clear
>
>
> Download CLEAN.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/clean.exe
>
> It is a self-extracting ZIP file that contains the Kixtart Script
> Interpreter
> { http://kixtart.org Kixtart is CareWare } three batch files, two Kixtart
> scripts, two Link
> (.lnk) files and a PDF instruction file.
>
> GETFILES.BAT -- For downloading (FTP) the files needed to run the McAfee
> Command Line
> Scanner. You may have to disable your FireWall or allow FTP.EXE to go
> through your FireWall
> to allow the FTP utility to download the needed files
>
> CLEAN.BAT -- For running within Windows after running
> c:\mcafee\GetFiles.BAT. If you choose
> to scan again at a future date, run this batch file. It will
> automatically check the date
> of the McAfee DAT files and if it is a couple of days old, it will
> download (FTP) the latest
> signature files and install them before performing the scan.
>
> DOSCLEAN.BAT -- For use on a Win9x/ME PC or on a Win2K/WinXP PC that is
> using FAT32 after
> you have booted from an Emergency Boot Disk or DOS disk and have already
> executed;
> c:\mcafee\GetFiles.BAT from within Windows. DOS disk boot images can be
> obtained from;
> http://www.bootdisk.com/bootdisk.htm
>
> I need you to perform the following...
>
> Execute; CLEAN.EXE
> Choose; Unzip
> Choose; Close
>
> Execute; c:\mcafee\GetFiles.BAT
> { or Double-click on 'GetFiles Link' in c:\mcafee }
>
> Reboot the PC into Safe Mode [F8 key during boot]
>
> Shutdown as many applications as possible !
> It would also help for you to read - "How to perform a clean boot in
> Windows XP"
> http://support.microsoft.com/kb/310353
>
> Execute; c:\mcafee\CLEAN.BAT
> { or Double-click on 'Clean Link' in c:\mcafee }
>
> A final report in HTML format called C:\mcafee\ScanReport.HTML will be
> generated. At the
> end of the scan, it will be displayed in your browser (Opera, FireFox or
> Internet Explorer).
> It is suggested that you move the report out of c:\mcafee before
> performing another scan.
> It would be a good idea to scan in Safe Mode and in Normal Mode and save a
> copy of the HTML
> report for each session.
>
> Execute Ad-aware SE and perform a complte deep scan of the computer and
> remove any/all
> parasites found.
>
> Execute WinsockFix.exe which you saved to the desktop it and choose "Fix".
>
> Reboot your computer to normal mode and you should have a clean PC.
>
>
> * * * Please report back your results * * *
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>