Home Malware Programs Adware NewDotNet

NewDotNet

Posted: March 28, 2006

Threat Metric

Threat Level: 3/10
Infected PCs: 1,009
First Seen: July 24, 2009
Last Seen: June 21, 2023
OS(es) Affected: Windows

NewDotNet is an Internet Explorer plugin that sends a web browser to sponsored web sites whenever the user enters a non-existent or mistaken site address into the address bar. The threat can track user browsing habits and may show commercial pop-up advertisements. It is able to silently update itself via the Internet. NewDotNet is bundled with a variety of advertising-supported products. It also can be manually installed. The threat runs on every Windows startup.

Aliases

Adware.NDotNet [Symantec]NewDotNet [Sunbelt]Spyware/New [Panda]Trojan.Agent.90112.U [McAfee-GW-Edition]AdWare.Win32.NewDotNet [Ikarus]Misc/NDotNet [Fortinet]Adware.NewDotNet [DrWeb]Adware.NewDotNet.B-3 [ClamAV]Adware.Newdotnet.AE [BitDefender]Generic.GPR [AVG]Win32:Newdotnet-B [Avast]AdWare/Win32.NewDotNet [Antiy-AVL]TR/Agent.90112.U [AntiVir]AdWare.Win32.NewDotNet!IK [a-squared]Adware:Win32/NewDotNet [Microsoft]
More aliases (66)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



nnrun.exe File name: nnrun.exe
Size: 8.19 KB (8192 bytes)
MD5: 5344e9a2de08e1c137cab57774452ea8
Detection count: 95
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
nem220.dll File name: nem220.dll
Size: 36.6 KB (36608 bytes)
MD5: edc3bc97aa6ae2e2f0427cf269b4d757
Detection count: 83
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: January 8, 2022
NEWDOT~1.DLL File name: NEWDOT~1.DLL
Size: 90.11 KB (90112 bytes)
MD5: 3a8098aa13c94e795fdb372554bb97c7
Detection count: 66
File type: Dynamic link library
Mime Type: unknown/DLL
Group: Malware file
Last Updated: December 11, 2009
nnrun.exe File name: nnrun.exe
Size: 3.07 KB (3072 bytes)
MD5: 6e9661d77d7f3721807970dd30611a98
Detection count: 55
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
newdotnet7_22.dll File name: newdotnet7_22.dll
Size: 614.4 KB (614400 bytes)
MD5: fb75cc573d91162ca8d4746b6c57c1e8
Detection count: 46
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
nncore.dll File name: nncore.dll
Size: 360.44 KB (360448 bytes)
MD5: 2c4fcb03293a1d3d39b999227b547b20
Detection count: 22
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
NDNuninstall6_38.exe File name: NDNuninstall6_38.exe
Size: 50.68 KB (50688 bytes)
MD5: 77c92713297c1c8b4f4c01c170c2ba89
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 2, 2020
newdotnet6_38.dll File name: newdotnet6_38.dll
Size: 229.37 KB (229376 bytes)
MD5: b8d2ea737777a3313a3b6fa5251fdc72
Detection count: 3
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: November 3, 2020
newdotnet7_48.dll File name: newdotnet7_48.dll
Size: 610.3 KB (610304 bytes)
MD5: cf618ba6dc9914d1dea07bbfcf273fa4
Detection count: 3
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009

Registry Modifications

The following newly produced Registry Values are:

CLSID{4A2AACF3-ADF6-11D5-98A9-00E018981B9E}{DD521A1D-1F98-11D4-9676-00E018981B9E}File name without pathNDNuninstall6_38.exenewdotnet7_48.dllHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}New.net

Additional Information

The following directories were created:
%ProgramFiles%\NewDotNet

Related Posts

One Comment

  • Jason says:

    The only part of this information that seemed helpful or correct was the information of the registry entries that were entered. They were correct (legacy_nnserv) but none of the files exist, none of the directories exist, and yet I cannot remove the registry entries. I keep getting an error. "Error removing entry"

Loading...