I cannot connect to any internet sites, email etc. Why would it delete something cruical

Here is the stuff that adware says Ive got to remove. See anything I should not remove?


Ad-aware 6 Scanning Result, 3-17-2003 7:50:14 PM
------------------------------------------------
Vendor Type Category Object Comment
CommonName Process Data Miner c:\progra~1\common~2\toolbar\winnet.exe
CommonName RegKey Data Miner HKEY_CLASSES_ROOT:BabeIE.AgentIE\
CommonName RegKey Data Miner HKEY_CLASSES_ROOT:BabeIE.AgentIE.1\
IPInsight RegKey Data Miner HKEY_CLASSES_ROOT:CLSID\{000004CC-E4FF-4F2C-BC30-DBEF0B983BC9}\
Favoriteman RegKey Data Miner HKEY_CLASSES_ROOT:CLSID\{00000EF1-34E3-4633-87C6-1AA7A44296DA}\
MySearch RegKey Data Miner HKEY_CLASSES_ROOT:CLSID\{014DA6C1-189F-421a-88CD-07CFE51CFF10}\
MySearch RegKey Data Miner HKEY_CLASSES_ROOT:CLSID\{014DA6C2-189F-421a-88CD-07CFE51CFF10}\
MySearch RegKey Misc HKEY_CLASSES_ROOT:CLSID\{014DA6C3-189F-421a-88CD-07CFE51CFF10}\
MySearch RegKey Misc HKEY_CLASSES_ROOT:CLSID\{014DA6C5-189F-421a-88CD-07CFE51CFF10}\
MySearch RegKey Misc HKEY_CLASSES_ROOT:CLSID\{014DA6C7-189F-421a-88CD-07CFE51CFF10}\
MySearch RegKey Misc HKEY_CLASSES_ROOT:CLSID\{014DA6C9-189F-421a-88CD-07CFE51CFF10}\
MySearch RegKey Misc HKEY_CLASSES_ROOT:CLSID\{014DA6CB-189F-421a-88CD-07CFE51CFF10}\
CommonName RegKey Data Miner HKEY_CLASSES_ROOT:CLSID\{6656b666-992f-4d74-8588-8ca69e97d90c}\
MySearch RegKey Misc HKEY_CLASSES_ROOT:Interface\{014DA6C4-189F-421A-88CD-07CFE51CFF10}\
MySearch RegKey Misc HKEY_CLASSES_ROOT:Interface\{014DA6C6-189F-421A-88CD-07CFE51CFF10}\
MySearch RegKey Misc HKEY_CLASSES_ROOT:Interface\{014DA6CA-189F-421A-88CD-07CFE51CFF10}\
MySearch RegKey Misc HKEY_CLASSES_ROOT:Interface\{014DA6CC-189F-421A-88CD-07CFE51CFF10}\
IPInsight RegKey Data Miner HKEY_CLASSES_ROOT:Interface\{297AFC77-2039-4D3C-BEF9-598819EB2C8A}\
CommonName RegKey Data Miner HKEY_CLASSES_ROOT:Interface\{99908473-1135-4009-BE4F-32B921F86ED9}\
IPInsight RegKey Data Miner HKEY_CLASSES_ROOT:IPInsigt.IPInsigtObj.1\
MySearch RegKey Misc HKEY_CLASSES_ROOT:MySearchToolBar.NetscapeShutdown\
MySearch RegKey Misc HKEY_CLASSES_ROOT:MySearchToolBar.NetscapeShutdown.1\
MySearch RegKey Misc HKEY_CLASSES_ROOT:MySearchToolBar.NetscapeStartup\
MySearch RegKey Misc HKEY_CLASSES_ROOT:MySearchToolBar.NetscapeStartup.1\
MySearch RegKey Misc HKEY_CLASSES_ROOT:MySearchToolBar.SettingsPlugin\
MySearch RegKey Misc HKEY_CLASSES_ROOT:MySearchToolBar.SettingsPlugin.1\
CommonName RegKey Data Miner HKEY_LOCAL_MACHINE:Software\CLASSES\BabeIE.Handler\
CommonName RegKey Data Miner HKEY_LOCAL_MACHINE:Software\CLASSES\BabeIE.Handler.1\
CommonName RegKey Data Miner HKEY_LOCAL_MACHINE:Software\CLASSES\BabeIE.Helper\
CommonName RegKey Data Miner HKEY_LOCAL_MACHINE:Software\CLASSES\BabeIE.Helper.1\
CommonName RegKey Data Miner HKEY_LOCAL_MACHINE:Software\CLASSES\Interface\{2D0F5208-3198-49A4-86A7-D65E9E582751}\
CommonName RegKey Data Miner HKEY_LOCAL_MACHINE:Software\CLASSES\PROTOCOLS\Handler\cn\
CommonName RegKey Data Miner HKEY_LOCAL_MACHINE:SOFTWARE\CommonName\
Cydoor RegKey Data Miner HKEY_CURRENT_USER:software\cydoor\
Cydoor RegKey Data Miner HKEY_LOCAL_MACHINE:Software\Cydoor\
Cydoor RegKey Data Miner HKEY_CURRENT_USER:software\cydoor services\
IPInsight RegKey Data Miner HKEY_LOCAL_MACHINE:SOFTWARE\IPInsight\
CommonName RegKey Data Miner HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00000000-0000-0000-0000-000000000000}\
IPInsight RegKey Data Miner HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000004CC-E4FF-4F2C-BC30-DBEF0B983BC9}\
MySearch RegKey Misc HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{014DA6C1-189F-421a-88CD-07CFE51CFF10}\
FlashTrack RegKey Data Miner HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FTapp\
MySearch RegKey Misc HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\My Search Uninstall\
MySearch RegKey Misc HKEY_LOCAL_MACHINE:Software\MySearch\
MySearch RegKey Misc HKEY_CLASSES_ROOT:TypeLib\{014DA6C0-189F-421A-88CD-07CFE51CFF10}\
CommonName RegKey Data Miner HKEY_CLASSES_ROOT:TypeLib\{D879D743-E2CC-4161-8034-2234203681C9}\
Favoriteman RegKey Data Miner HKEY_CLASSES_ROOT:TypeLib\{EF100607-F409-426A-9E7C-CB211F2A9030}\
MySearch RegValue Misc HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\Internet Explorer\Toolbar\
MySearch RegValue Misc HKEY_CURRENT_USER:Software\Netscape\Netscape Navigator\Automation Shutdown\
MySearch RegValue Misc HKEY_CURRENT_USER:Software\Netscape\Netscape Navigator\Automation Startup\
CommonName RegValue Data Miner HKEY_LOCAL_MACHINE:Software\Microsoft\Windows\CurrentVersion\Run\c:\progra~1\common~2\toolbar\winnet.exe
New.Net RegKey Misc HKEY_LOCAL_MACHINE:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001\c:\windows\newdot~1.dll
New.Net RegKey Misc HKEY_LOCAL_MACHINE:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002\c:\windows\newdot~1.dll
New.Net RegKey Misc HKEY_LOCAL_MACHINE:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019\c:\windows\newdot~1.dll
New.Net RegKey Misc HKEY_LOCAL_MACHINE:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020\c:\windows\newdot~1.dll
New.Net RegKey Misc HKEY_LOCAL_MACHINE:System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000004\c:\windows\newdotnet3_36.dll
CommonName Folder Data Miner C:\Program Files\CommonName\
MySearch File Misc c:\program files\mysearch\bar\1.bin\s42ns.exe
MySearch File Misc c:\program files\mysearch\bar\1.bin\s4bar.dll
Cydoor Folder Data Miner C:\WINDOWS\system32\AdCache\
Favoriteman File Data Miner c:\windows\system32\mbr32.dll
Favoriteman File Data Miner c:\windows\system32\mpz300.dll

LONG READ, some things you can do that WILL work, others are more work than other ways:

CLSID, TypeLib, & Interface entries CAN be "touchy"...

Those are generally Globally Unique Identifier (GUID) related for OCX/OLEServer DLL's or ActiveX (.ocx & .dll type respectively) controls otherwise known as COM/DCOM componentry, that other things in your system can call upon & use (much like std. .dll types, but these can be multiply instanced in memory easily due to using those G.U.I.D.'s to help the memory manager make references to them, so even if same name ones come online into memory, it knows they are diff. in version & possibly function value returns & errorlevel test return values as well).

BUT, by the same token, alot of those 'spywares' may install themselves in that manner too, I don't see why not (I don't design that type of thing, but if I were to, I don't see why implementing one as an .ocx OR .dll of ActiveX type would not be NOT doable either)...

* I don't know what to tell you other than FIRST export out those registry keys/hives one by one, & also copy the files they refer to or zip them into a backup first & see what is affected...



(Yes, it's work... but, it's that or use another web-browser & let Ad-Aware wipe all of that out! You could let it do that, & then try to reinstall your browser again, just like starting it from scratch pretty much except you'd backup your cookies (if you use those) & settings as well as favs/bookmarks first, just in case it does not look for those upon reinstallations!)

APK

nah its not the browser. even when i load icq afterwards it closes saying something like unable to open sockets.

email cant login, norton antivirus corporate gets some wierd yellow exclamation mark. I had to system restore.

Sounds like some program that was installed messed up your winsock.dll file. I think I would replace that file first. I should go to c:\windows\system32

Or as an alternative, running SFC /scannow.

replacing winsock did not help. still no internet

well there are two spyware files I cannot remove. it always says there in use and I tried safe mode.

newdotnet3_36.dll

and

ipinsigt.dll

I read somewhere that these change winsock settings and do not correct those settings after being removed thus causing connection problems. Any ideas how I can remove these baddies?

"well there are two spyware files I cannot remove. it always says there in use and I tried safe mode.

newdotnet3_36.dll

and

ipinsigt.dll

I read somewhere that these change winsock settings and do not correct those settings after being removed thus causing connection problems. Any ideas how I can remove these baddies?"

Logon using Recovery Console (this is BETTER than "safe-mode", it's non-GUI & works in 'real-mode' prior to Explorer.exe even starting up as the shell), that's doable from the Operating System installation Cd-Rom, & remove them...

* Renaming them should do just as well, & when done doing that, just sign off & then let the system boot normally into Windows & see how that goes... now, if you STILL are hosed, there is a posting here @ this site with ALL of the std. WinSock networking parameters & settings:

http://www.ntcompatible.com/forums/viewtopic.php?t=24257&sid=57f5a361add1b8098f9256e6f8f064fb

I did that for someone else, all in .reg file format that you can use IF you still cannot connect to the net & use those to restore your Winsock default parameters!

APK

I am having the same trouble that were mentioned in these postings ...

Everytime I restart my computer and error message comes up:
Error loading c:\progra~1\newdot~1\newdot~1.dll

Now, I cannot connect to the internet or my e-mail.

This began after I downloaded and installed Norton Antivirus 2004 w/internet security program from the Norton Web Site.

Norton help line states that it is not a Norton problem. I have fully uninstalled all Norton programs and I still cannot connect to the internet or my e-mail.

I operating with Windows ME ....
I cannot access the internet with the computer involved, so how do I get the repair files??? The discs sent to my when I purchased my Gateway Notebook are "restore" discs ... there isn't a specific Windows ME disc ...

Help!!!!!!!!!!!!!!!!!!!!!!!

check out this support topic over at Lavasoft support forums.


http://www.lavasoftsupport.com/index.php?act=ST&f=24&t=4243&s=8ed2c1c7b0e6541c84d8c20f40bb9a29

hi

im having similar problems with adaware. i installed it, it found about a million things wrong with my computer and the NT countdown started. so i set it to run before windows opened, ran it, deleted the lot, and then my internet connection disappeared. couldnt fix it, so hit windows restore, but now im back to the original issue - there's a lot of crap on my computer doing damage. particular current problem is that when i try to open certain sites in IE eg www.gigsandtours.com, before the page loads IE shuts itself down and disappears. i can get hold of a copy of McAfee this weekend, but will i have the same connection deletion if i run that?

i dont know much about computers at all, any help much appreciated. why do people write things that wreck complete strangers computers?!

Originally posted by azurecat_84:

"why do people write things that wreck complete strangers computers?!"

GOOD QUESTION!

I don't know why myself & wonder about it... terrorism, "fame" (via infamy), stupidity, & what-not, who knows?



* I know one thing for sure: It keeps techies working, & ALOT! I have around 10 people in my area whose systems I regularly "purge" because of spyware/malware/virus/worms etc. & it gets me paid... do I like having to do it? No...

(It's a damn pain & no matter HOW I setup folks' systems (diff. browsers other than IE) & also cutoff the parts of IE that makes you vulnerable in my estimation like Java, java script , & ActiveX use + download & install automatically... sooner or later, those same folks go to a site that requires it & want it turned back on in IE... & I tell them ahead of time: You want that? I can turn it back on, but when the 'leaves come blowing in the front door again' (malware, bho inserts, etc.) you'll be calling me to pay me your money again is all... sooner or later!)

It's not only myself that earns coins here: Nearly everytime I visit the local computer stores around here, what is the "general complaint"? Virus/malware/spyware/bho infections... "My computer is running REALLY slow" type complaints & 9/10 times?

It's IE acting as a gateway to this madness & its being infected by this stuff because of how it's setup by default.

(Yes, alot of pages depend on it being setup "weak", but the same thing is what lets you use features many webpages use, but so does the 'bad stuff' out there imo!)

APK

P.S.=> There is a GOOD side to it - It's money in my pocket. Bad side is? If folks just did w/out IE, & MOST CERTAINLY IE with all of the settings turned on in Internet Options that allow for this type of thing to take place?? I will be getting paid their hard-earned money everytime... apk