RUNDLL32 heeft een fout met betrekking tot een ongeldige pagina veroorzaakt in
module NEWDOTNET3_22.DLL op0167:1000ab5e.
Registers:
EAX=01072544 CS=0167 EIP=1000ab5e EFLGS=00010246
EBX=ffd8c SS=016f ESP=0063f5dc EBP=0063f888
ECX=01070078 DS=016f ESI=0024cc FS=2acf
EDX=07785ce1 ES=016f EDI=00 GS=00
Bytes in CS:EIP:
83 7c 0b 28 01 7e 54 ff 75 0c 50 e8 02 fa ff ff
Stackdump:
81738ab6 002 001 003 bf0416bb c29bc590 bff79480 525013ee 00100010 18010030 39360040 0030 207e00 0040 00013936 00300400

How do I get rid of NewDotnet ?
Is it in the Win 98 registry ?

I have lost internet access and thus can not download RegCleaner. Kept getting can't find Newdot~1.dll file when booting Win98. I had already deleted newdotnet using start, add/remove program when I found out through foistware that there was another way to delete it properly but it was too late. Only other option I can think of is to re-install windows 98 and save my info on back up disks. Do I have any other option?

Bet you got it from http://www.webattack.com/freeware/network/fwp2p.shtml huh?? or one of million other sites.

You downloaded something you could have lived without. Bearshare, Imesh, Morpheus, Grokster,"DietKazaa" (I really hate that one!!!), yadda yadda?? Right?

You better believe NewDotNet is NOT the only spyware you got with one of these shareware programs.

You'll find:
Gator, Ezula, DoubleClick, fsg_3202.exe, mmod.exe(Ezula module),babeie.agentie(in your registry)'aka' CNBabeie,favoriteman., favoriteman1., CommonName(another hard one to remove), cydoor, "trickler", ezmmod, ezstub.exe,to name a few...

Well, DONT GO REINSTALLING YOUR OS, messing with "anything" yet OR your Registry. You can fix this with the right tools. DO NOT GIVE UP AND REINSTALL YOUR OS ALL THAT STUFF,you don't need to and you will probably screw your PC's performance up for good.

*First, go to: http://www.pcworld.com/downloads/file_description/0,fid,7423,00.asp

and download the free Ad-aware scanner.

Next, forget about your personal antivirus software on your computer and go to Norton housecall for a free virus scan, you'll be surprised at what your antivirus software failed to see.
**Well, what does this have to do with NewDot and my problem?? Because, if programs stop working(which they will) correctly and error messages constantly keep poping up, its probably a virus/worm/trojan screwing up things...you might end up removing a program thinking the spyware is causing it and really it could have been easily fixed. Eliminate virus's first and repair files. Then remove spyware with a spyware targeting scanner program (i.e. Ad-aware).**

If you do have a virus, use the tools that Norton refers you to download after it finishes scanning. Download the refered fix tool and install. Run the fix tool and it will rid you of virus's and repair damaged files.

Next run your newly installed Ad-aware scanner and when its done, CHECK MARK all detected/suspicious keys, files, folders...everything TO BE DELETED! Delete everything it shows.

NOTE: If you have other shareware that's 'Ad supported', then they will probably not run anymore if you delete the adware componets with the Ad-aware scanner, meaning some shareware is free cause you agree to let them run ads(in the liscence agreement) or "adware" on your computer to get the use of the program service for free, duh, thats why your computers screwed at the moment...scan and remove everthing found by Ad-aware anyway, it must be done:)

You'll probably see a 100 or more files(etc...) detected by Ad-aware...delete them all.

If it doesn't delete NewDotNet...then use Add/Remove programs...NOTE: you'll probably get 1 of 3 different pop-alerts that says that one way or another that you can't delete this file.

No sweat. Use TaskManager to end process of that program and then Add/Remove(keep Tsk mngr open)and proceed to remove NewDotNet and CommonName and Ezula folders(the same way). Also, you might see eanthology...Add/Remove it too.

Its a good idea to run the Ad-aware scan one more time, it will catch any spyware that it didn't detect the first time around. Delete all items found.

Next, restart computer. You'll probably get a RUNDLL.EXE error saying blaa blaa C:\Programfiles\CommonName\ folder not found (something like that). Its because of a string in your registry...its "babeie" and/or "eanthology".

Next go to RUN in start menu,

type in 'regdit',

navigate (carefully, well, not that carefully) to: Hkey_local_machine\software\microsoft\Windows\Current version\Run, now look on the left side of the screen at the red icons with ab on them. Look for "babeie" and/or "eAthology" and/or "CNBabeie" and delete them.

Also, go back to RUN and type "regedit" agin,
and go back to \Current version\ and expand it,
look down the list of files and look for "GatorTest" and "Imesh" (and other identified adware). Ad-aware doesn't detect these 2 for some reason. You can safely delete them aswell. This should delete all spyware on your system. Do periodical checks with Ad-aware every couple days.

I run Windows xp Home Edition.

Tell those --s at Gator what you think of them. Their email address is info@gatorcorporation.com

Diane
**

Hello Diane,

Please accept our apology for any inconvenience our software may have caused you.
Stop-Sign is often bundled with popular file-sharing programs, and it is very possible that when you downloaded and installed one of these programs (and accepted their user agreement), you also agreed to download Stop-Sign.

To make sure you are taken off our mailing list, please visit the following website and follow the directions you are given:

http://www.homepageware.com/lcgi-bin/unsub.cgi

To manually remove eanthology programs, please follow the steps below:

1)Click START, then SETTINGS (skip this if you have WindowsXP), then
CONTROL PANEL, then ADD/REMOVE Programs.
2)Select eanthology.
3)Click ADD/REMOVE (CHANGE/REMOVE in Windows2000/NT/XP.)

This will open the eanthology Features Window with two columns. The
right column lists features currently installed on your computer; the
left column lists features available to be installed.

I) To Install/Uninstall INDIVIDUAL eanthology features:
A)Double-click on the features you wish to Add or Remove to move it
to the proper column.
B)Click APPLY.
C)Click OK at the "Additional Components Needed" dialog if it appears.
D)Reboot for changes to take effect.

II)To Install/Uninstall ALL eanthology features:
A)Click on the INSTALL ALL or REMOVE ALL button.
B)Click NO at the "Turn Off Autoscan?" dialog if it appears.
C)Click APPLY.
D)Click OK at the "Additional Components Needed" dialog if it appears.
E)Reboot for changes to take effect.

Press CTRL-ALT-DEL once to bring up Task Manager:
- For Windows 95/98/ME: Look for "defscangui.exe" and press "End Task".
- For Windows XP/NT/2000: Click on "Processes" tab, search for "defscangui.exe" and press "End Process".

If you have any problems with the above directions, please send an email to support@eacceleration.com for action.

Again, we apologize for any inconvenience you have experienced.

Here are the CORRECT procedures to remove our software:

Since then, I have been forced to use the library's computers in order to aid my frustrations, but to further my anger, I have yet to find a remedy. Someone, please, please help my second problem.

http://www.newdotnet.com

i wanna thank you for you advice on what 2 do with the problem on my comp... it worked ;)

i have 1 more problem now, i think it might be something to do with me messing around in the registry a while back when i was living on 10 gig of hard disk space :( ummm it seems like a smal problem but my links in new windows dont appear to open... do u know what might be the problem or what system file i might be missing?

if any1 can help me id be very grateful

I get an a defscangui error message whenever I start up my system. What is the cause of this error message?

Then get ZoneAlarm (http://www.zonelabs.com) and read and follow those directions. If you see entries in the Alerts&Logs section of ZoneAlarm listing something called eanthology Download module, you have to do this:

1. Highlight on of these entries (there will be several) and note what asked for permission, and which directory it lives in. Go to that directory and look for:

ANTIVI~1.EXE
rav_temp.exe
eanth_setup.exe

I just deleted them, and things worked fine, but your mileage may vary, if you know what I mean. Maybe change the .exe to .ex_ and reboot to make sure nothing will be hosed by deleting these things.

Then, in the registry, go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, and look for an entry for rav_temp.exe. Export the key first, just in case you have to restore it for some reason, then delete it. There may also be another entry for Eac_Rvndl. Do the same thing there.

The stuff under this key runs during boot, so one of these executables tells ZoneAlarm that the eanthology Download Module has permission to access the internet.

Pretty insidious, eh??

That ought to do it.

216.231.108.129 is buttonware.net

You people, on the other hand, have been very helpful and I very much appreciate your sharing. However, I was only able to reinstall my roommate's cable model software on her HP Windows ME machine after following your suggestions AND those from Microsoft Knowledge Base article 299393 (http://support.microsoft.com/default.aspx?scid=KB;en-us;299393& or see below). The article actually discusses removal of new.net in the context of its conflicting with the installation of ActiveSync 3.0 or 3.1, but it worked, it caught some crap that Ad-aware and some of the manual suggestions missed. Here's the "Manually Uninstall New.Net" section:

Method 2: Manually Uninstall the New.net Program
To manually uninstall the New.net program, you need to edit the registry.

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To manually uninstall the New.net program:
Click Start, point to Settings, and then click Control Panel.
Click the Windows Setup tab, click Communications, and then click Details.
Click to clear the Dial-Up Networking check box, click OK, and then click OK to close the Add/Remove Programs properties.
Start Registry Editor. To do this, click Start, click Run, type regedit, and then click OK.
Locate and delete the following registry keys:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ Winsock
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ Winsock2
NOTE: The following key may not be present.

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\Winsock
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\ Winsock2
HKEY_LOCAL_MACHINE\Software\New.Net
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\ CurrentVersion\Uninstall\New.Net
Locate (but do not delete) the following Registry Key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

In the right window of Registry Editor, right-click Newdotnet Startup, and then click Delete.
In the C:\Windows folder, rename the Newdotnet9_20.dll file to Newdotnet9_20.lld.

For additional information about how to rename a file, click Start, click Help, click the Index tab, type renaming, and then double-click the Renaming Files topic.
Click Start, point to Settings, and then click Control Panel.
Click the Windows Setup tab, click Communications, and then click Details. Click to clear the Dial-Up Networking check box, click OK, and then click OK to close the Add/Remove Programs properties.
Restart your computer.
After you perform these steps, ActiveSync should install successfully.
MORE INFORMATION
NOTE: This article does not apply to machines running Windows NT 4.0. If the _ins5576 error is occurring during ActiveSync install on an NT 4.0 machine, please see the following article:

For information and removal instructions regarding newdotnet, please visit http://www.newdotnet.com or contact us directly at support@new.net.

I am not an expert; the "information provided by Bruce" was copied verbatim from Microsoft. However, obviously, feel free to disregard my post, but I would STRONGLY advise you to regard with GREAT skepticism the information provided by NewDotNet -- which is, again, the SOURCE of the "harm on your computer!"

As for me, wild horses couldn't drag me to their web site (except on an FBI computer in investigation of their business practices). Certainly NOT at their behest! That would be like going to Saddam Hussein and asking him for the antidote after he releases the toxic gas.

If you're at wit's end and simply MUST hear from the horse's -- um -- mouth, I'd encourage you to use the e-mail option to contact them rather than visit the website. But DON'T use your regular e-mail account: use a throw-away e-mail address, access it from Kinko's, and even THEN do NOT open any attachments from NewDotNet! Run your virus-checker and spyware-killer before, during and after, wear a bio-suit, and shower and de-louse yourself after you're done. If you're Catholic, you may wanna cross yourself for good measure.

By the way, my roommate's computer has performed flawlessly since I (at long last) extricated the last of NewDotNet's slimy tentacles (using the Microsoft information in my last post, which allowed me to reinstall the previously-stymied software provided by my ISP). She even bought me a bottle of Frangelico and some ice cream from Cold Stone Creamery as thanks! (As well she should -- the chicanery of NewDotNet and its cohorts cost me hours and hours in diagnostics and repairs.)

GDivx
iMesh
Kazaa
RadLight / Subtitle Studio
RealNetworks (RealOne Player)
UK Software

Previously, we were bundled with the following software companies:

Babylon
BearShare
Cydoor (LingoWare)
Go!Zilla
Grokster
Mindset Interactive (NetPalNow)
Webshots

If you did not actually visit our website, http://www.new.net, and install our plug-in, one of the above companies is the most likely source of the plug-in on your computer.

There are multiple procedures to removing our software and each procedure should be followed as outlined to ensure proper removal.

PROCEDURE 1 (Add/Remove Programs):

1. Click on Start.
2. Click on Settings.
3. Click on Control Panel.
4. From the Control Panel, double-click on Add/Remove Programs.
5. Click on the Install/Uninstall tab in the Add/Remove Programs Properties window.
6. Locate either New.net Application or New.net Domains and select it.
7. Click on the Add/Remove button.
8. After removal of our software, you may be prompted to reboot. Please reboot after removing our software.
9. If this does not fully remove our software, please proceed to PROCEDURE 2.

PROCEDURE 2 (Uninstall from Hard Drive):

1. Double-click on My Computer.
2. Double-click on the C: drive.
3. Double-click on the Program Files folder.
4. Locate and double-click on the NewDotNet folder. If there is no folder, please proceed to PROCEDURE 3.
5. Locate and double-click on the uninstall executable; it will be labeled uninstallX_XX.exe. (“X” represents the version number of the uninstaller)
6. After removal of our software, you may be prompted to reboot. Please reboot after removing our software.
7. If this does not fully remove our software, please proceed to PROCEDURE 3.

PROCEDURE 3 (Locate Backup Copy of Uninstaller and Uninstall from Hard Drive):

1. Double-click on My Computer.
2. Double-click on the C: drive.
3. Double-click on the Windows or Winnt folder.
4. Locate and double-click on the uninstall executable; it will be labeled NDNuninstallX_XX.exe. (“X” represents the version number of the uninstaller)
5. After removal of our software, you may be prompted to reboot. Please reboot after removing our software.
6. If this does not fully remove our software, please proceed to PROCEDURE 4.

PROCEDURE 4 (Download Uninstall from New.net):

1. From a computer that has Internet access, click on the following link:
http://www.new.net/support/uninstall4_50.exe
2. Download and save uninstall4_50.exe to a 3-½ floppy disk.
3. Insert the floppy disk into the floppy drive of the computer that needs to have our software uninstalled from.
4. Click on Start.
5. Click on Run.
6. In the Open window type, A:\uninstall4_50.exe.
7. Click on the OK button.
8. After removal of our software, you may be prompted to reboot. Please reboot after removing our software.

NOTE: THIS FILE IS NOT TO BE DISTRIBUTED, MIRRORED, OR LINKED WITHOUT THE EXPRESSED WRITTEN CONSENT OF NEW.NET.

If the above 4 procedures do not fully remove our software, please contact New.net Customer Support at (626) 405-2000 or at support@new.net.

(c)2001, 2002 New.net, Inc. All rights reserved.

It needs to be deleted from outside windows, run the emergency floppy and type erase %fsg_3202

What support method are you trying to provide? Your instructions will not do anything.

For information and removal instructions regarding newdotnet, please visit http://www.newdotnet.com or contact us directly at support@new.net.

Sludge in your Computer - VBS_SLUDGE.A (Low Risk) VBS_SLUDGE.A is a Visual Basic script worm that spreads using the peer-to-peer file sharing application Kazaa Lite.

Upon execution, this worm drops a copy of itself in the Windows temporary folder using the file name "_uninst12.vbs." It then adds a registry entry so that its dropped copy is executed at every Windows startup.

This virus creates copies of itself using one of 12 specific file names. These copies are dropped in %Program Files%\kazaa lite\my shared folder, a common shared folder of Kazaa Lite.

This worm is intended to also propagate through Kazaa, Bearshare, Edonkey2000 and Morpheus, but fails to do so due to flaws in its script code. Although the script checks for the existence of the shared folders of these peer-to-peer, file-sharing applications, it incorrectly copies the dropped files to Kazaa Lite's shared folder. The folders checked are:

%Program Files%\bearshare\shared
%Program Files%\edonkey2000\incoming
%Program Files%\kazaa\my shared folder
%Program Files%\morpheus\my shared folder

When the infected user's system date is March 3, this worm displays a message box with the following text:

Address violation at 030303x
03/03/03 exception error. Please reboot.

If you would like to scan your computer for VBS_SLUDGE.A or thousands of other worms, viruses, Trojans and malicious code, visit HouseCall, Trend Micro's free, online virus scanner at: http://housecall.trendmicro.com/

VBS_SLUDGE.A is detected and cleaned by Trend Micro pattern file #454 and above.

This is the link for Trend Micro:
http://www.trendmicro.com/vinfo/

I saw I had NewDotNet installed on my second pcsystem (Windows 2000 pro). I downloaded version 6 of Ad-aware and ran this on both my computers. On the Windows XP machine (which is also the 'host') I removed the spyware found with succes. On the Windows 2000 machine my internet connection doesn't work anymore. Network is ok.
How to fix this? Anyone knows? Thanx a lot!

Here is the link for the above program:

.shop .xxx .club .ltd
.inc .travel .tech .sport
.family .law .med .mp3

If you are unaware of how NewDotNet was installed on your computer, we currently have agreements with the following companies to bundle our software with their downloadable software:

Cliprex (Cliprex Lite)
Freeze.com
Gdivx
Grokster
IMesh
MetaMachine (eDonkey2000)
NeoNapster
RadLight (RadLight Standard & Subtitle Studio)
RealNetworks (RealOne Player)
UK Software (EasyFreeWebCam)

Previously, we were bundled with the following software companies:

Babylon
BearShare
BikiniDesk
Cydoor (LingoWare)
Go!Zilla
Kazaa
Mindset Interactive (NetPalNow)
Webshots

If you did not actually visit our website, http://www.new.net, and install NewDotNet, then one of the above companies is the most likely source of our software on your computer.

There are multiple procedures to removing our software and each procedure should be followed as outlined to ensure proper removal. You only need to complete one of the below procedures to fully remove our software.

PROCEDURE 1 (Add/Remove Programs):

1. Click on Start.
2. Click on Settings.
3. Click on Control Panel.
4. From the Control Panel, double-click on Add/Remove Programs.
5. Click on the Install/Uninstall tab in the Add/Remove Programs Properties window.
6. Locate either New.net Application or New.net Domains and select it.
7. Click on the Add/Remove button.
8. After removal of our software, you may be prompted to reboot. Please reboot after removing our software.
9. If this does not fully remove our software, please proceed to PROCEDURE 2.

PROCEDURE 2 (Uninstall from Hard Drive):

1. Double-click on My Computer.
2. Double-click on the C: drive.
3. Double-click on the Program Files folder.
4. Locate and double-click on the NewDotNet folder. If there is no folder, please proceed to PROCEDURE 3.
5. Locate and double-click on the uninstall executable; it will be labeled uninstallX_XX.exe. (“X” represents the version number of the uninstaller)
6. After removal of our software, you may be prompted to reboot. Please reboot after removing our software.
7. If this does not fully remove our software, please proceed to PROCEDURE 3.

PROCEDURE 3 (Locate Backup Copy of Uninstaller and Uninstall from Hard Drive):

1. Double-click on My Computer.
2. Double-click on the C: drive.
3. Double-click on the Windows or Winnt folder.
4. Locate and double-click on the uninstall executable; it will be labeled NDNuninstallX_XX.exe. (“X” represents the version number of the uninstaller)
5. After removal of our software, you may be prompted to reboot. Please reboot after removing our software.
6. If this does not fully remove our software, please proceed to PROCEDURE 4.

PROCEDURE 4 (Download Uninstall from New.net):

1. From a computer that has Internet access, click on the following link: http://www.new.net/support/uninstall4_88.exe
2. Download and save uninstall4_88.exe to a 3-½ floppy disk.
3. Insert the floppy disk into the floppy drive of the computer that needs to have our software uninstalled from.
4. Click on Start.
5. Click on Run.
6. In the Open window, type A:\uninstall4_88.exe.
7. Click on the OK button.
8. After removal of our software, you may be prompted to reboot. Please reboot after removing our software.

NOTE: THIS FILE IS NOT TO BE DISTRIBUTED, MIRRORED, OR LINKED WITHOUT THE EXPRESSED WRITTEN CONSENT OF NEW.NET.

If the above 4 procedures do not fully remove our software, please contact New.net Customer Support at (626) 405-2000 or at support@new.net.

Thanks,

how to manually removed gator spyware without using software downloaded from web site like spy bot. Please advice

If I have made a link to a programme on Desktop, and then decide to remove it, I am warned that this will only uninstall the shortcut. It invites me to click on a link to Add/Remove Programmes. When I click on it..nothing at all happens.

Can anyone assist me to get my Add/Remove Programmes utility back onto Control Panel?

Many thanks in anticipation.

I work in IT myself, and the number of PCs I encounter with new.net, CommonName, and others installed is phenomenal. They all spread like viruses, especially CommonName. It’s often quicker to re-image the machines rather than try to remove the rubbish. The argument is that people can choose whether or not they install the application. I’m in an environment with highly variable IT literacy, so many users click “Yes” to whatever they see on screen.

I'd like to take aim at CommonName on this occasion, as it's a terrible application to remove. I know many people who have suffered loss of internet connectivity through this badly coded piece of software.

First method : go to add/remove programs, spot the eanthology programs there and remove all (keeping the "Manager" for last). Hit CTRL-ALT-DEL and end the "DEFSCANGUI.EXE" process. Go to C:/Program files and delete the eanthology folder *ONLY IF IT'S EMPTY* If it's not empty, don't delete it yet, go to method #2. If you can delete it, do it, then run a fully updated SpyBot or Ad-Aware scan to remove leftovers. Now you're almost done. Skip method #2 and go straight to "Final clean-up" (below).

Method #2 : if you fail from add/remove, run SpyBot or Ad-Aware (deep scan) and remove eacceleration and other crap (SpyBot may ask to reboot to finish clean-up, do it). Hit CTRL-ALT-DEL and end the "DEFSCANGUI.EXE" process. Go to C:/Program files, click once on the eanthology folder to view content. You should see a file named "unins.exe" (or something close to that) ; double-click it and removal will occur. If prompted, click "Yes" to remove shared files. Reboot. Run SpyBot or Ad-Aware again. Almost done.

Final clean-up (everyone): click "Start">"Find", make sure to go in "All files" and search "All hard drive" with "hidden files and folders" (advanced options). Type in "*eanth*.*" (without quotes). Delete all files found here. Done.

THANKS!
Cookie Jones