NewtonKnows manual removal:
Kill processes:
newtnupd.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Virtumundo\Program\Newton Knows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\newtnupd.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_CLASSES_ROOT\CLSID\{6600D22F-083F-11D6-99DE-D172E92EBC2A}
HKEY_CLASSES_ROOT\CLSID\{8AE10EE3-84BE-4D3C-8106-7020BF3F0142}
HKEY_CLASSES_ROOT\CLSID\{E9407738-A996-421A-A309-5C93C699E10A}
HKEY_CLASSES_ROOT\CLSID\{EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
HKEY_CLASSES_ROOT\Typelib\{6600D22F-083F-11D6-99DE-D172E92EBC2A}
HKEY_CLASSES_ROOT\Typelib\{8AE10EE3-84BE-4D3C-8106-7020BF3F0142}
HKEY_CLASSES_ROOT\Typelib\{EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AE10EE3-84BE-4D3C-8106-7020BF3F0142}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Newton Knows
Unregister DLLs:bar.dll, inetadpt.dll, vmain.dll
Delete files:newtnupd.exe, bar.dll, inetadpt.dll, vmain.dll
Delete directories:C:\Program Files\Newton Knows
C:\Windows\Temp\vupd
C:\Winnt\Temp\vupd
Misc:Exact file location:
vmain.dll - C:\Program Files\Newton Knows
bar.dll, inetadpt.dll - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
Post Comment:
Attention: Use this form only if you have additional information about NewtonKnows parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Comments from visitors:
1. by Nightwolf. 2004-03-01 12:16:46
Has feature for 'automatic update'.