Google Answers Logo
View Question
 
Q: Virus issue on my local pc ( Answered,   0 Comments )
Question  
Subject: Virus issue on my local pc
Category: Computers > Security
Asked by: ss111-ga
List Price: $7.00
Posted: 17 Oct 2006 07:26 PDT
Expires: 16 Nov 2006 06:26 PST
Question ID: 774347
Virus Issue 
It seems like my computer is still not completely clean of viruses. I
have tried to clean it up using AVast anti virus program (including
scan at boot up time, which did find number of viruses.) Now when I
start the computer I get an error that says Error Loading
c:\progra~1\newdot~1\newdot~1.dll. The specified module can not be
found. I know that this was one of the file that was infected by the
virus.

The reason I think it is still infected with virus is there is atlest
one program, ultraedit, that does not start anymore. I can see the
.exe running but I can never get the editor up and running, which is
very annoying. Also from time to time I see computer slow down, and
the other day I was trying to configure php and apache and could not
get that working.

Any help would be highly appreciated. Please note that I can use most
of the programs without much problem but there is still seems to be
some file got lost or just out of whack.

My system is windows 2000 (Generally I keep it upto date)
Answer  
Subject: Re: Virus issue on my local pc
Answered By: livioflores-ga on 17 Oct 2006 09:55 PDT
 
Hi!!

The problem you have looks like a wrong uninstallation of the browser
hijacker  NewDotNet. The "purpose" of this is to add support for
additional domains like .AGENT .INC .LOVE .SHOP .SPORT, etc.

The first thing you can try is to go to the Control Panel and look the
Add/Remove Programs list. If you find some item related to NewDot or
NewDotNet just click the correspondent Remove or Uninstall button.

If you find no traces about it at the Add/REmove Program you must
remove its references at the startup list, to do that do the
following:
Start --> Run --> type regedit and press Enter --> Expand
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run -->
Click on Run --> then look in the right hand pane for any items
containing the text NEWDOT or NEWDOTNET or related --> Select these
items and delete them --> Now expand
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -->
delete any items containing NEWDOT or NEWDOTNET or related found
there.
For example you can find this one:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\new.net startup 

Remove the folder C:\program files\newdotnet if present.

You probably need to follow these instructions:
"End Processes (may or may not exist): (use the task manager --> Run
--> type taskmgr --> press enter)
ndnuninstall4_50.exe
ndnuninstall5_20.exe
ndnuninstall5_40.exe
ndnuninstall5_48.exe
uninstall3_88.exe 
uninstall4_50.exe 
uninstall4_80.exe 
uninstall5_48.exe 
uninstall5_20.exe
wcmdmgr.exe 

Unregister DLLs:
Tip: this is only a list of known files/locations. You will want to do
a search by the name of the file to see if they're on your system.
Each file is in several locations so you'll need to search for them
and unregister + delete them in every location you find. If you do not
find one of these files just skip it.

newdot~1.dll
newdot~2.dll 
newdotnet3_36.dll
newdotnet3_70.dll 
newdotnet3_88.dll 
newdotnet4_50.dll 
newdotnet4_85.dll 
newdotnet4_88.dll
newdotnet5_20.dll
newdotnet5_48.dll 
newdotnet6_22.dll
newdotnet6_30.dll 
newdotnet6_38.dll "
From "NewDotNet Removal":
http://articles.networktechs.com/400-p1.php


Note about Unregister DLLs: 
just go to Run --> type regsvr32 -u filename.dll --> press enter.
After complete these tasks reboot the computer


Regarding the networking problems, NewDotNet is known as a networks
configuration destroyer, to fix this damage you need to repair the
Winsock, use one of the following tools for that:

"LSP-Fix - a free program to repair damaged Winsock 2 stacks": (recommended)
Please read the info at this page, then download the program and let it work.
http://www.cexx.org/lspfix.htm

"WinSock Fix":
WinSock Fix repairs your internet explorer. Winsock fix offers a last
remedy if your Internet connectivity has been corrupted because of
damaged or deleted registry entries. Winsock can often correct
problems that are encountered after improver removal of spyware or
adware programs that make your internet connectivity to stop
functioning. It also has a feature to backup your registry before you
allow Winsock to fix your internet connectivity. It?s a small program
that restores your Winsock settings back to default and is also free
of cost.
http://www.wintipz.com/Downloads/WinsockxpFix.exe


About Ultraedit you probably need unisntall it and then reinstall it
again after a reboot.


At this point I think your computer is back to normal run. Please feel
free to use the clarification feature if you continue experiencing
troubles regarding this or if you find something unclear or a dead
link.

I hope this helps you.

Best Regards,
livioflores-ga
Comments  
There are no comments at this time.

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy