Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit OK,,, I think I have it... I am attaching the log,,,, I hope.... Chris wrote: >Cris - Correct. > >Rita - **IMPORTANT** > >This list of items you have is not a list of things to be removed! >Hijack This does not recognise spyware >It just shows you hidden start up entries on your PC. >That's why someone who knows what they're doing should look at the log and >advise you. > >Do not remove anything on the Hijack This log quite just yet! > >Regards > >Chris >chris@xxxxxxxxxx > > > >-----Original Message----- >From: pctechtalk-bounce@xxxxxxxxxxxxx >[mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of Cris >Sent: 16 December 2005 17:57 >To: pctechtalk@xxxxxxxxxxxxx >Subject: -=PCTechTalk=- Re: ***SPAM*** [2.9 / 2.9] Re: RUNDLL > >when you ran it, didn't you have a choice to 'run and save log file' ? >I just checked the version I have here, which is probably older, and that is >a choice that I have. >Cris >----- Original Message ----- >From: Rita Harper >To: pctechtalk@xxxxxxxxxxxxx >Sent: Friday, December 16, 2005 12:39 PM >Subject: -=PCTechTalk=- Re: ***SPAM*** [2.9 / 2.9] Re: RUNDLL > > >Ok, I get a list of 27 things to be removed. But, I can't see any way >to save this file so I can send it as an attachment. How do I do >that?? Thanks.. > > > >> >> >> >> >>>Yep. There is. >>> >>>Download Hijack This (google it) and scan and save a log. >>>Post the log in an email and one of us on this list can look through it >>> >>> >and > > >>>tell you what to tell Hijack This to remove. >>> >>>Btw. Spybot will normally remove all traces of newdotnet. >>>I have installed it on hundreds of PC's and never experienced any lock >>> >>> >ups. > > >>>- you just have to try a different download server every now'n'then. >>> >>>Not a bad pay off for a small free program that does it's job brilliantly >>> >>> >- > > >>>remove spyware! >>> >>>Regards >>> >>>Chris >>>chris@xxxxxxxxxx >>> >>> >>> >>>-----Original Message----- >>>From: pctechtalk-bounce@xxxxxxxxxxxxx >>>[mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of Rita Harper >>>Sent: 16 December 2005 14:38 >>>To: pctechtalk@xxxxxxxxxxxxx >>>Subject: -=PCTechTalk=- Re: ***SPAM*** [2.9 / 2.9] Re: RUNDLL >>> >>>Chris, >>>Thank you for this info. I did go to the startup menu, and did uncheck >>>the NEWDOT line, but it won't stay unchecked. When I restart the >>>computer, I'm still getting that message. Is there something else I can >>>try. Thanks... >>>Rita >>>Chris wrote: >>> >>> >>> >>> >>> >>> >>> >>>>Yep it does happen every now'n'then with spybot. If it does happen, just >>>>choose a different update server from the list and try again - the server >>>>chosen is probably a bit busy. >>>> >>>>As for the 1\NEWDOT, 2\NEWDOT 2 DLL, can't be found. >>>>Problem - this means you had an infection but have got rid of it. >>>>BUT - you haven't got rid of the start up code, so each times windows >>>> >>>> >>>> >>>> >>>> >>>> >>>starts >>> >>> >>> >>> >>> >>> >>>>it has an instruction to run that bit of spyware - which it cannot as >>>> >>>> >it's > > >>>>been removed - hence the error. >>>> >>>>Take a look in your start up list (msconfig) and untick anything that >>>>mentions newdotnet >>>> >>>>Regards >>>> >>>>Chris >>>>chris@xxxxxxxxxx >>>> >>>> >>>>-----Original Message----- >>>>From: pctechtalk-bounce@xxxxxxxxxxxxx >>>>[mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of milady >>>>Sent: 16 December 2005 06:17 >>>>To: pctechtalk@xxxxxxxxxxxxx >>>>Subject: ***SPAM*** [2.9 / 2.9] -=PCTechTalk=- Re: RUNDLL >>>> >>>>I found Spybot has a habit of doing that..nearly every time I tried to >>>> >>>> >even > > >>>> >>>> >>>> >>>> >>>> >>>> >>> >>> >>> >>> >>>>use it, the computer would freeze and I would have end that program...OR >>>> >>>> >>>> >>>> >>>> >>>> >>>the >>> >>> >>> >>> >>> >>> >>>>update wouldn't go thru..I got rid of that program.. >>>> *~*<*>Mary Lou<*>*~* >>>> /\ - /\ >>>> >> *^* << >>>> www.theanimalrescuesite.com >>>> >>>>----- Original Message ----- >>>>From: "Rita Harper" <rharper2@xxxxxxxxxxxxxxxx> >>>>To: <pctechtalk@xxxxxxxxxxxxx> >>>>Sent: Thursday, December 15, 2005 8:39 PM >>>>Subject: -=PCTechTalk=- Re: RUNDLL >>>> >>>> >>>>witch, Thank you for this information. I tried to find this file, but >>>>so far I haven't. I just tried to update my SpyBot, and it hung up. I >>>>guess I will keep looking. Thanks again. >>>>Rita >>>>witch wrote: >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>>>You have an infection. >>>>>http://www.neuber.com/taskmanager/process/newdot~2.dll.html >>>>> >>>>>----- Original Message ----- >>>>>From: "Rita Harper" <rharper2@xxxxxxxxxxxxxxxx> >>>>>To: <pctechtalk@xxxxxxxxxxxxx> >>>>>Sent: Thursday, December 15, 2005 6:04 PM >>>>>Subject: -=PCTechTalk=- RUNDLL >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>>>I get this error message when I turn on my computer. It says something >>>>>>about >>>>>> >>>>>>1\NEWDOT, 2\NEWDOT 2 DLL, can't be found. Any idea how I can get >>>>>>rid of this message. Thanks for your help... >>>>>> >>>>>>Rita >>>>>> >>>>>>-- >>>>>><Please delete this line and everything below.> >>>>>> >>>>>>To unsub or change your email settings: >>>>>>//www.freelists.org/webpage/pctechtalk >>>>>> >>>>>>To access our Archives: >>>>>>http://groups.yahoo.com/group/PCTechTalk/messages/ >>>>>>//www.freelists.org/archives/pctechtalk/ >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>-- >>>><Please delete this line and everything below.> >>>> >>>>To unsub or change your email settings: >>>>//www.freelists.org/webpage/pctechtalk >>>> >>>>To access our Archives: >>>>http://groups.yahoo.com/group/PCTechTalk/messages/ >>>>//www.freelists.org/archives/pctechtalk/ >>>> >>>> >>>>-- >>>><Please delete this line and everything below.> >>>> >>>>To unsub or change your email settings: >>>>//www.freelists.org/webpage/pctechtalk >>>> >>>>To access our Archives: >>>>http://groups.yahoo.com/group/PCTechTalk/messages/ >>>>//www.freelists.org/archives/pctechtalk/ >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>-- >>><Please delete this line and everything below.> >>> >>>To unsub or change your email settings: >>>//www.freelists.org/webpage/pctechtalk >>> >>>To access our Archives: >>>http://groups.yahoo.com/group/PCTechTalk/messages/ >>>//www.freelists.org/archives/pctechtalk/ >>> >>> >>> >>> >>> >>> >>> >>-- >><Please delete this line and everything below.> >> >>To unsub or change your email settings: >>//www.freelists.org/webpage/pctechtalk >> >>To access our Archives: >>http://groups.yahoo.com/group/PCTechTalk/messages/ >>//www.freelists.org/archives/pctechtalk/ >> >> >> >> >> >> >> > > >-- ><Please delete this line and everything below.> > >To unsub or change your email settings: >//www.freelists.org/webpage/pctechtalk > >To access our Archives: >http://groups.yahoo.com/group/PCTechTalk/messages/ >//www.freelists.org/archives/pctechtalk/ > > > >-- ><Please delete this line and everything below.> > >To unsub or change your email settings: >//www.freelists.org/webpage/pctechtalk > >To access our Archives: >http://groups.yahoo.com/group/PCTechTalk/messages/ >//www.freelists.org/archives/pctechtalk/ > > > -- <Please delete this line and everything below.> To unsub or change your email settings: //www.freelists.org/webpage/pctechtalk To access our Archives: http://groups.yahoo.com/group/PCTechTalk/messages/ //www.freelists.org/archives/pctechtalk/