NewtonKnows manual removal:
Kill processes:
newtnupd.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Virtumundo\Program\Newton Knows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\newtnupd.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_CLASSES_ROOT\CLSID\{6600D22F-083F-11D6-99DE-D172E92EBC2A}
HKEY_CLASSES_ROOT\CLSID\{8AE10EE3-84BE-4D3C-8106-7020BF3F0142}
HKEY_CLASSES_ROOT\CLSID\{E9407738-A996-421A-A309-5C93C699E10A}
HKEY_CLASSES_ROOT\CLSID\{EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
HKEY_CLASSES_ROOT\Typelib\{6600D22F-083F-11D6-99DE-D172E92EBC2A}
HKEY_CLASSES_ROOT\Typelib\{8AE10EE3-84BE-4D3C-8106-7020BF3F0142}
HKEY_CLASSES_ROOT\Typelib\{EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AE10EE3-84BE-4D3C-8106-7020BF3F0142}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Newton Knows
Unregister DLLs:bar.dll, inetadpt.dll, vmain.dll
Delete files:newtnupd.exe, bar.dll, inetadpt.dll, vmain.dll
Delete directories:C:\Program Files\Newton Knows
C:\Windows\Temp\vupd
C:\Winnt\Temp\vupd
Misc:Exact file location:
vmain.dll - C:\Program Files\Newton Knows
bar.dll, inetadpt.dll - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
Has feature for 'automatic update'.
Post Comment: