New.net in my reg!

General Network security, firewalls, port filtering/forwarding, wireless security, anti-spyware, as well as spam control and privacy discussions.
Post Reply
User avatar
JackHamma96
Regular Member
Posts: 202
Joined: Mon Mar 11, 2002 5:10 pm
Location: North Carolina

New.net in my reg!

Post by JackHamma96 »

HKEY_LOCAL_MACHINE\Software\New.net

Even if I delete it, it comes back later. Ad-Aware doesnt even detect it, i 1st found out about it from RegCleaner 4.3


Anyway I can fix it?



And its nice to be back :cool:
The CNNSI Guy: "Go Do that VooDoo that U do so well"
User avatar
blebs
Posts: 12819
Joined: Sat Dec 02, 2000 12:00 am
Location: North Canton, Ohio

Post by blebs »

Why of course there is.......Now, if I can find my floppy with the removal instructions, I'll post it in a few minutes. :D

That'll never happen 2 times in a row-Found it on the first try-Here Ya Go!!!

Here is the way to delete the newdotnet Winsock2 registry keys and restore the winsock. It's quite simple actually.

"go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters.
You should see 2
folders, "NameSpace_Catalog5" and "Protocol_Catalog9".
Click the small "+" (plus) signs next to both of them
Inside both folders, you should see a "Catalog_Entries" folder
Within each of those folders are numbered folders (i.e. 000000000001,000000000002, etc.)

For the "NameSpace_Catalog5" numbered folders:
A. First, make note of how many folders there are
B. Highlight the first one
C. On the righthand side, locate the line "Library Path"
D. In that line, the rightmost column should begin with something similar to
"C:\windows" or "%SystemRoot%".
E. Locate any of the numbered folders that read
"C:\windows\newdotnet2_90.dll" or similar in the "Library Path" line
F. Delete each of those folders referring to "newdotnet"
G. Rename each numbered folder so that they are all consecutive. For
example, if there were 4 folders and you deleted 2 of them, you will need to
rename the remaining folders "000000000001" and "000000000002".
H. Do this by right-clicking the folder name, left-click Rename and then
type in the new number (be absolutely sure you don't delete any of the
zeros).
I. Next, highlight the "NameSpace_Catalog5" folder on the lefthand side.
J. On the right, locate the "Num_Catalog_Entries" line. At the end of this
line is a number in parentheses.
K. Edit that number by doing the following:
i. Double-click "Num_Catalog_Entries"
ii. In the small pop-up window, select "Decimal"
iii. Edit the value of the number on the left to reflect the number of
remaining folders (in the case of the example in #7 above, you would enter
2)
iv. Click OK

For the "Protocol_Catalog9" numbered folders:
A. First, make note of how many folders there are
B. Highlight the first one
C. On the righthand side, you will see a line beginning with
"PackedCatalogItem". Double-click on that word and a small window will
pop-up.
D. In the "Edit Binary Value" window, several columns appear with numbers
and letters. In the last column appears a path that will look something
like, "C:\WINDOWS\NEWDOT~.DLL" or "%SystemRoot%" followed by a long list of
characters.
E. Locate the numbered folders that indicate "C:\WINDOWS\NEWDOT~.DLL" in the
"Edit Binary Value" window described above and DELETE each of them.
F. Rename each remaining numbered folder so that they are all consecutive.
For example, if there were 13 folders and you deleted 2 of them, you will
need to rename the remaining folders "000000000001" through "000000000011".
G. Do this by right-clicking the folder name, left-click Rename and then
type in the new number (be absolutely sure you don't delete any of the
zeros)
H. Next, highlight the "Protocol_Catalog9" folder on the lefthand side.
I. On the right, locate the "Num_Catalog_Entries" line. At the end of this
line is a number in parentheses.
J. Edit that number by doing the following:
i. Double-click "Num_Catalog_Entries"
ii. In the small pop-up window, select "Decimal"
iii. Edit the value of the number on the left to reflect the number of
remaining folders (in the case of the example in #6 above, you would enter
11)
iv. Click OK
K. Close the Registry Editor. Your changes will be automatically saved.
L. Restart your computer and then try accessing the Internet as you would
normally. "

I would add to check the other CurrentControlSet if you have them (I had two more)and do the same there.
After this use a registry search tool and delete any other keys with newdotnet in them.
And try to avoid this spyware to begin with !
User avatar
JackHamma96
Regular Member
Posts: 202
Joined: Mon Mar 11, 2002 5:10 pm
Location: North Carolina

Post by JackHamma96 »

Thanks blebs!!!!!!!!! It worked :nod:



Stupid iMesh :mad:


Go Grokster! WinMX and KazzaLite :p
The CNNSI Guy: "Go Do that VooDoo that U do so well"
User avatar
blebs
Posts: 12819
Joined: Sat Dec 02, 2000 12:00 am
Location: North Canton, Ohio

Post by blebs »

WinMX 3.1 + NapMX=JOY!!!!
User avatar
Croc
Posts: 7818
Joined: Sat Jan 20, 2001 12:00 pm
Location: Up top East side Downunder

Post by Croc »

blebs.....you LEGEND!!!!!! ;) ;) ;) ;) :D
So all this info is stored on floppy disks???

Croc.
Croc.
It will be long, it will be hard and there will be no withdrawal.
Winston Churchill
Remember: Wherever you go in life, you take yourself with you.
User avatar
blebs
Posts: 12819
Joined: Sat Dec 02, 2000 12:00 am
Location: North Canton, Ohio

Post by blebs »

Originally posted by Croc
blebs.....you LEGEND!!!!!! ;) ;) ;) ;) :D
So all this info is stored on floppy disks???

Croc.
Not all of my shtuff. Just a few that I knew would come in handy someday! ;)
User avatar
denolth2
Regular Member
Posts: 354
Joined: Tue Nov 28, 2000 12:00 am
Location: mushroom forest

napmx?

Post by denolth2 »

never heard of that one...still got to get the bloody router fixed!!! :(

den2
User avatar
Norm
SG VIP
Posts: 14195
Joined: Tue Mar 27, 2001 12:00 pm

Post by Norm »

Good stuff there Ross, I've never seen that before either. Thanks for posting it, ....... saved for future use :)

Are you saying Adaware doesn't fix this same problem ?
User avatar
blebs
Posts: 12819
Joined: Sat Dec 02, 2000 12:00 am
Location: North Canton, Ohio

Post by blebs »

Originally posted by Norm
Are you saying Ad aware doesn't fix this same problem ?
Like many other things, It's supposed to, but I guess it doesn't get to the nitty gritty of it. Don't take that as gospel. I never had to deal with it myself, so I don't know for sure. ;)
User avatar
blebs
Posts: 12819
Joined: Sat Dec 02, 2000 12:00 am
Location: North Canton, Ohio

Re: napmx?

Post by blebs »

Originally posted by denolth2
never heard of that one...still got to get the bloody router fixed!!! :(

den2
http://download.com.com/3000-2196-8613277.html
User avatar
Norm
SG VIP
Posts: 14195
Joined: Tue Mar 27, 2001 12:00 pm

Post by Norm »

Maybe it's just a leftover redundant registry entry, even after a scan with Adaware. Hopefully it no longer does any harm, but still keeping your post in case I need it one day. Not for my own machines, but for onsite work.

Thanks again, have a good weekend Ross.
Post Reply