Hi

Found your site, whilst searching for a way to stop an Antivirus XP 2008 program from running.
It didn't allow me to go into control panel and delete (add remove programs).
It kept on putting up pops ups," running a scan and telling me I had 700+ viruses, it wouldn't let me open the internet browser (searched at work).

Followed your "remove this before requesting malware removal help"

Followed the instructions and the antivirus program has now stopped running, yippe, desktop page is a bit wonky, looks like an MS window is open and then has the desktop icons are overlayed. a little confusing.

So am now posting logs, forgive me if buggered up a little, not very comp literate



Look forward to hearing from you

Many thanks in advance

[recovering disk space -- attachment deleted by admin]You were infected with NewDotNet, so let's take care of that. MBAM found it and deleted the related files, but we should still look into it. First, download LSPFix.exe to a convenient LOCATION. Do NOT run this program yet. This is only to be used if you lose internet access after removing NewDotNet.

To get rid of NewDotNet, go to:

Start > Control Panel > Add or Remove Programs and remove the following:

NewDotNet or New.Net Applications or New.Net Domains (anything that says New.Net)

If it is not there, go here and follow Procedure 4: NewDotNet Removal Procedure 4.

In the event that you lose internet access after removing New.Net, please double-click LSPFix.exe that you downloaded earlier. You will see 2 panels. If there is any file listed in the "Remove" panel on the right-side, leave it as is and just click "Finish>>" then reboot your computer and you should now have access to the internet again. If nothing is listed under the "Remove" panel, do NOT do anything—just close the program.




While you're at it, download ComboFix and save it to your desktop. Run the program and read its disclaimer (it's fairly short) and make sure you really pay attention to what it says. Follow the prompts and when finished, it will produce a log at C:\ComboFix.txt. Go ahead and post that here. Note: Don't click on the window while it's running; this may cause stalls.



Post back with the ComboFix log and a new HijackThis log. Also, let me know how everything went with the New.Net instructions. MBAM may have removed it properly, but we need to make sure.Hello again

Followed your instructions and have the following to REPORT back.

No sign of newdotnet on control panel add/remove programs.
Hyperlink to removal program would not link.
Combofix when runs comes up with a date error and then stops.
So no log to post from that.

Did run Hijack again and the log is attached but not sure what use it'll be as not a lot has changed.

Cheers

[recovering disk space -- attachment deleted by admin]The time and date are off on the PC. HijackThis shows you ran the scan on 09/06/2008, which is 4 days ago. This probably means you haven't had any Windows updates for a while.

To change the time zone and enable automatic adjustment for DST

1. Right-click your system clock, and then click Adjust Date/Time.
2. Click the Time Zone tab. Click the list, and then click on your time zone.
3. SELECT the Automatically adjust clock for daylight saving changes check box, if your region uses daylight-saving time.
4. Click OK.

See here for details

Now try to run ComboFix again and post the log along with a new HijackThis log from after ComboFix has completed it's run.