NewtonKnows Description:

NewtonKnows comprises a IE search-hijacker and toolbar, and a targeting pop-up system that works across many browsers. NewtonKnows has a silent self-updating feature which allows its controlling server to execute arbitrary unsigned code.

NewtonKnows Automatic Removal:

Using BPS Adware & Spyware Remover to detect and remove NewtonKnows AUTOMATICALLY!

NewtonKnows Manual Removal:

Follow these steps to remove NewtonKnows from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

1. Go to the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run.
   If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\newtnupd.exe, delete it and reboot the machine immediately.
    
2. Unregister these DLLs with Regsvr32, then reboot:
   programfilesdir+\newton knows\vmain.dll
   systemroot+\system32\bar.dll
   systemroot+\system32\inetadpt.dll
   systemroot+\system\inetadpt.dll
    
3. Remove these registry items (if present) with RegEdit:
   HKEY_CLASSES_ROOT\clsid\{6600d22f-083f-11d6-99de-d172e92ebc2a}
   HKEY_CLASSES_ROOT\clsid\{8ae10ee3-84be-4d3c-8106-7020bf3f0142}
   HKEY_CLASSES_ROOT\clsid\{e9407738-a996-421a-a309-5c93c699e10a}
   HKEY_CLASSES_ROOT\clsid\{ee392a64-f30b-47c8-a363-cda1cec7dc1b}
   HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{ee392a64-f30b-47c8-a363-cda1cec7dc1b}
   HKEY_CLASSES_ROOT\typelib\{6600d22f-083f-11d6-99de-d172e92ebc2a}
   HKEY_CLASSES_ROOT\typelib\{8ae10ee3-84be-4d3c-8106-7020bf3f0142}
   HKEY_CLASSES_ROOT\typelib\{ee392a64-f30b-47c8-a363-cda1cec7dc1b}
   HKEY_CURRENT_USER\software\microsoft\internet explorer\search\searchassistant\http://www.newtonknows.com/search.php?p=282437689
   &z=20817&u=155042&client=4
   HKEY_LOCAL_MACHINE\clsid\{ee392a64-f30b-47c8-a363-cda1cec7dc1b}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{ee392a64-f30b-47c8-a363-cda1cec7dc1b}
   HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8ae10ee3-84be-4d3c-8106-7020bf3f0142}
   HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search\searchassistant\http://www.newtonknows.com/search.php?p=282437689&
   z=20817&u=155042&client=4
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{ee392a64-f30b-47c8-a363-cda1cec7dc1b}
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\newtnupd.exe
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\newton knows
   HKEY_LOCAL_MACHINE\software\virtumundo\program\newton knows
    
4. Remove these files (if present) with Windows Explorer:
   programfilesdir+\newton knows\vmain.dll
   systemroot+\system32\bar.dll
   systemroot+\system32\inetadpt.dll
   systemroot+\system\inetadpt.dll
    
5. Remove these directories (if present) with Windows Explorer:
   programfilesdir+\netwon knows\logs
   programfilesdir+\netwon knows\templates
   programfilesdir+\netwon knows\toolbar
   programfilesdir+\newton knows
   systemroot+\temp\vupd
    
6. After following the instructions above, you will still need to restore your original settings and prevent this from happening again. Here's how.

More Removal Instructions for Adware/Spyware Programs - 'N'