Home / malware

PDF

Adware.Newdotnet.U

First posted on 21 November 2011.
Source: BitDefender

Aliases :

There are no other names known for Adware.Newdotnet.U.

Explanation :

Adware.Newdotnet.U is a browser hijacker that adds subdomains of 'new.net' to you local name resolution system modifying the TCP/IP stack resulting in the system being to resolve names ending with .inc .familly, .shop, .travel.

Also when you type in to your adress bar a keyword it enables searching and redirects you to http://www.quickbrowsersearch.com/search.cgi and displays results for you rearch. The main problem with this is that the search page contains links to spyware/adware programs and the results of the search are also sponsored links that may install spyware/adware on your computer.

NewDotNet installs istself as an LSP (Layered Service Provider) within your Windows Winsock settings. Although this is not overly harmful. If New.Net is removed without fixing the Winsock addresses, it will cause a computer not to be able to connect to the Internet.

You can get infected with this adware by manually installing it from new.net website or it may come bundled in the following applications:

BikiniDesk
Cliprex (Cliprex Lite)
GDivx
IMesh
MetaMachine (eDonkey2000)
RadLight (RadLight Standard & Subtitle Studio)
RealNetworks (RealOne Player)
UK Software (EasyFreeWebCam)
NeoNapster

Previously, it was bundled with the following software products

Babylon
BearShare
Cydoor (LingoWare)
Go!Zilla
Grokster
KaZaA
Mindset Interactive (NetPalNow)
Webshots

NewDotNet, if selected to install along with the distribution software and will install after the distribution
software installation.

Last update 21 November 2011

 

TOP