Remove Iddono. Description and removal instructions

Title: Iddono
Type: Remote Administration Tools	Severity scale: (55 / 100)

Several variants of this RAT virus (Iddono 1.4b, Iddono 2.0) appeared in the internet from September 2001 to April 2003. This RAT program uses the same basic principles that all RATs do: the victim's computer is infected with a server program, and the attacker can access it from a distant machine, using a client on his own machine. It was written in Delphi programming language. The author is a hacker called iddo.

FORUM:
Discuss Iddono in
spyware removal forum

Iddono properties:
• Allows remote user connection
• Hides from the user
• Stays resident in background

Automatic Iddono removal:

remover for Iddono

Iddono manual removal:

Kill processes:
editor.exe, iddono20.exe, srvidd20.exe, [system, root]\\newfolder.exe

HELP:
how to kill malicious processes

Unregister DLLs:
libedit.dll, shelliddono.dll

HELP:
how to unregister malicious DLLs

Delete files:
editor.exe, iddono20.exe, libedit.dll, shelliddono.dll, srv0104.ids, srvidd20.exe, [system root]\\newfolder.exe

HELP:
how to remove harmful files

Other programs to remove Iddono:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 30/03/05
Information updated: 13/06/07

Additional resources related to Iddono:

Attention: If you know or you have a website or page about Iddono removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Iddono parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Comments from visitors:

1. by Guest. 2007-06-13 22:06:38

i got my system infected with newfolder.exe......n im not able to remove it....n there is no run in my windows ..not able to ctl+alt+del ..even i m not able to change my homepage earlier i set google..now its something else....please guys help me out....

2. by Guest. 2007-05-14 05:05:52

NewFolder.exe not detected by SpyHunter