Remove NewtonKnows. Description and removal instructions

 
Title: NewtonKnows

Type: Browser Plugins
Severity scale:NewtonKnows severity is 29  (29 / 100)
 
NewtonKnows is an additional web browser toolbar that displays undesirable pop-up advertisements and commercial links, changes browser's default search page and related settings. It also tracks user Internet activity and silently updates itself via the Internet. NewtonKnows automatically runs on every Windows startup.


NewtonKnows properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic NewtonKnows removal:

remover for NewtonKnows

NewtonKnows manual removal:

Kill processes:
newtnupd.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Virtumundo\Program\Newton Knows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\newtnupd.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_CLASSES_ROOT\CLSID\{6600D22F-083F-11D6-99DE-D172E92EBC2A}
HKEY_CLASSES_ROOT\CLSID\{8AE10EE3-84BE-4D3C-8106-7020BF3F0142}
HKEY_CLASSES_ROOT\CLSID\{E9407738-A996-421A-A309-5C93C699E10A}
HKEY_CLASSES_ROOT\CLSID\{EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
HKEY_CLASSES_ROOT\Typelib\{6600D22F-083F-11D6-99DE-D172E92EBC2A}
HKEY_CLASSES_ROOT\Typelib\{8AE10EE3-84BE-4D3C-8106-7020BF3F0142}
HKEY_CLASSES_ROOT\Typelib\{EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AE10EE3-84BE-4D3C-8106-7020BF3F0142}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Newton Knows
Unregister DLLs:
bar.dll, inetadpt.dll, vmain.dll

Delete files:
newtnupd.exe, bar.dll, inetadpt.dll, vmain.dll
Delete directories:
C:\Program Files\Newton Knows
C:\Windows\Temp\vupd
C:\Winnt\Temp\vupd
Misc:
Exact file location:
vmain.dll - C:\Program Files\Newton Knows
bar.dll, inetadpt.dll - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32

Other programs to remove NewtonKnows:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 19/03/04
Information updated: 03/09/05

Additional resources related to NewtonKnows:

Attention: If you know or you have a website or page about NewtonKnows removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about NewtonKnows parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by Nightwolf. 2004-03-01 12:16:46
Assigns a unique Id to the computer that is sent out when you visit (some) sites. This unique ID is also associate with the email address and zip code entered in install.

Has feature for 'automatic update'.


Latest spyware news:
Similar parasites: