NewDotNet

New.Net is an Internet Explorer spyware/hijacker plug-in that adds subdomains of 'new.net' to our name resolution system (Windows’ Host file), resulting in what appear to be extra top-level domains (.shop, and so on) being resolvable. The New.net Domain Software application allows to access new domain name extensions such as .shop, .inc, and .tech, and get targeted Internet search results when we enter keywords directly into browser address bar or when we can't find the website we are looking for using an Internet Explorer toolbar plugin. NewDotNet installs itself as an LSP (Layered Service Provider) within our Windows Winsock settings. Although this is not overly harmful. If New.Net is removed without fixing the Winsock addresses, it will cause a computer not to be able to connect to the Internet due to the use of the Sporder.dll which is a Winsock2 layered Service Provider.0

General information:

Malware Name: NewDotNet
Malware Type: Adware
Company Name: New.net
Company URL: http://new.net/
Threat Level: Moderate Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation.

Company Description:

New.net™ seeks to become the world's leading domain name registry by introducing and selling domain names with new extensions that offer greater relevance and meaning than current Web site addresses ending in .com, .net, and other existing top-level domains. It makes this possible initially by encouraging millions of users to activate their Internet browsers to recognize New.net domain names and partnering with leading Internet Service Providers to activate its domain names automatically at the network level. Its primary objectives is to sell domain names that individuals and companies genuinely want, and to make the Internet an easier place for users to find what they are looking for.

Spyware Description:

New.Net is an Internet Explorer spyware/hijacker plug-in that adds subdomains of 'new.net' to our name resolution system (Windows’ Host file), resulting in what appear to be extra top-level domains (.shop, and so on) being resolvable. The New.net Domain Software application allows to access new domain name extensions such as .shop, .inc, and .tech, and get targeted Internet search results when we enter keywords directly into browser address bar or when we can't find the website we are looking for using an Internet Explorer toolbar plugin. NewDotNet installs itself as an LSP (Layered Service Provider) within our Windows Winsock settings. Although this is not overly harmful. If New.Net is removed without fixing the Winsock addresses, it will cause a computer not to be able to connect to the Internet due to the use of the Sporder.dll which is a Winsock2 layered Service Provider.0

Characteristics/Symptoms:

    -> Displays third-party advertising on the computer -> Tracks browsing habits -> Degrade the performance and stability of the computer. -> Bundled with other adware0

Additional information might be found here:

google Search at Google for NewDotNet
bing Search at Bing for NewDotNet
yahoo Search at Yahoo for NewDotNet

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\NewDotNet\newdotnet7_22.dll 600 Application Extension
C:\Program Files\NewDotNet\uninstall7_22.exe 179 Application

Folder information Created after Installation:

Folder Location

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\New.net URLUpdateInfo
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\New.net VersionMajor
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\New.net VersionMinor