Hi i have a W2KSERVER network and we have recently upgraded our internet connection to ADSL. And all of a sudden this annoying firstlook.com pop up is appearing on random computers. And the weird thing is it pops up even if no internet explorer pages are open! Anyway hope some1 can help

I have the same issue. However I've had cable for years, none of that has changed. The only stuff I've installed lately have been Win2k sp3 and the latest service packs from MS. I note that this firstlook thing appears to be a .NET service, and I wonder if it came with these MS patches.

I've emailed FirstLook about this and asked them how then got onto my system (it's part of the boot operation) and they've been pretty quiet about it. I think this is a new level of intrusion.

had the same problem, so i just went into add remove programs in the control panel and removed a program called firstlook portal software, not sure how it got there, but i'm hoping that solves the problem.

jeff, I'm trying to figure out if it came from one of the MS service packs. Did you install any before the firstlook thing appeared?

Thanks

Hmm thanks Jeff, im pretty sure we didnt install any Microsoft service packs prior to the firstlook saga, the only thing we did install was a third party accounting program....hm i also just noticed it isnt on every machine on the network - and when we install something we install it on each and every machine..

no, i haven't installed any service packs in a while. I have no idea where the software came from, it just showed up on my machine out of nowhere last week.

I found this nasty little program on my computer as well. It seems it installs itself if you download certain applications. I'm not actually sure what it rode in on in my case, but Add/Remove Programs is not sufficient to remove it. You have to search your hard drive for anything for anything to do with "firstlook" and also search in Regedit and nuke any "firstlook" entries. That's a bit drastic, but it didn't seem to have any ill effects for me.

I have the same problem with this popup of Firstlook.
But I think i've solved it with deleting the program and everything what I've found when performed the Search function for "Firstlook".
You also have to go to Add/Remove programs and remove the "New.net Domains" program and restart your PC.
That would be it. I hope.
C ya
Tito

It appears to me that new.net is responsible. I have new.net files on my hard drive that have the exact same file modification times as the firstlook files. The readme with new.net claims that it has an auto-update feature, which means that it could install the firstlook crap at any time that auto-upddate decides to run. I'm suggesting complete removal of all "newdotnet" related files, which are in add/remove programs, and "c:\program files\newdotnet".

Please post a follow-up if you have success or failure with this method.

Yes, the removal of everything related with NewdotNet (and Firstlook) was successful.
FirstLook was found with "Search" function and deleted, "New.net Domains" was found and removed with Add/Remove Programs in Control Panel.
Tito

Extremely annoying indeed. I think it started after patching MS IE...

As noted, I to have the same popup. I deleted the items noted, thanks all.

If you "right click" in the popup window you allowed to change settings. The information relates to "Macro Media Flash Player 6.0". I don't know if that's just the display tool or related to the popup living on my system.

I can only say that I did allow a "Flash" update to install in the past couple weeks.

Anyway, deleted and gone. Thanks again to all.

I just got this, and removed it. AT first I thought it was something to do with netscape.

Anyways, I sent a nasty letter to them, doubt anyone will even read it. But isn't this illegal ? To automatically install a program onto someone elses machine without them knowing ?

Isn't that basically what a virus does. Ok so this doesn't damage your computer or infect files, or transfer it self unknowingly (That we know of) but still..

i had that thing, too, and i know for sure that i didnt install anything.. completely deleted it now but these things make me mad! and yes, in my opinion, this is criminal!

Did the windowsupdate recently, and got lots of patchs for IE etc.
Got that annoying popup.

I ran the uninstall program that was in the NewDotNet folder, and then upon restarting, there was no popup.
I deleted the folder too just in case :)

I think I got this downloading an encryption patch from Microsoft. Not that I'm surprised. Thanks guys for giving all the input in how to get rid of this!

Well, here's the readme file for new.net client app. I only uninstalled FirstLook using the regular uninstall. I will go through this issue one step at a time to see what minimally needs to be uninstalled.

The New.net app doesn't *seem* to be responsible but I'll find out.

For the guy talking about the Macromedia Flash settings, they have nothing to do with this from what I can tell. It's just that the FirstLook ad was a flash ad.

New.net Client Application v4.34 README File
(c) Copyright 2001-2002 New.net, Inc. All Rights Reserved.

README TABLE OF CONTENTS

1. OVERVIEW
2. INSTALLATION
2.1 New.net Website Installation
2.2 Distribution Partner Installation
3. UNINSTALL PROGRAM
4. AUTO-UPDATE
5. TROUBLESHOOTING
6. KNOWN ISSUES
7. FOR MORE INFORMATION
8. VERSION HISTORY

________________________________________________________________

1. OVERVIEW

The New.net Client Application provides accessibility to the
New.net extensions sold at http://www.new.net. The
software installs at the OS (Operating System) level so that
all DNS functions for a New.net extension will work properly.
New.net registers domain names under extensions such as:

.AGENT
.INC
.LOVE
.SHOP
.SPORT

A full list of extensions offered by New.net is located at
http://www.new.net.

2. Installation

The New.net Client Application supports Windows 95, Windows 98,
Windows ME, Windows NT 4.0, Windows 2000, and Windows XP.

In order for the software to install under Windows NT 4.0 or
Windows 2000, administrator rights are required.

2.1 New.net Website Installation

The New.net Client Application can be installed by visiting
http://www.new.net. Once on the site you may click on the
"Enable Your Browser To See New.net Domains" link on the top
right hand corner of every page. The installation only
supports Netscape Navigator/Communicator and Internet Explorer
4.5 or higher.

2.2 Distribution Partner Installation

The New.net Client Application is currently distributed with the
following software titles:

BearShare
iMesh
KaZaA

The New.net Client Application was also previously, but no
longer, distributed with the follow software titles:

Go!Zilla
Babylon
Cydoor
GDivx
WebShots

The New.net Client Application, if selected to install along with
the distribution partner's software, will install after the
distribution partner software installation.

3. Uninstall Program

The New.net Client Application can be removed from Windows by
clicking the Add/Remove Programs icon in the Control Panel.
Select New.net Application and click the "Remove" button.

The uninstall will require a reboot in order to fully remove the
software.

4. Auto-Update

The New.net Client Application has a built in auto-update feature
that automatically checks New.net's servers periodically for
newer versions. If a new version is found, it is automatically
downloaded and installed with no need for interaction by the
user.

New.net respects the privacy of all its users and would never
transmit any personally identifiable information from any
computer. The ONLY Auto-Update information sent from the New.net
Client Application to New.net servers is the version number.

5. Troubleshooting

If you are experiencing any difficulties with the New.net Client
Application, please contact New.net's Customer Support Department
via e-mail at support@new.net or you may contact them via phone
at (818) 385-2000.

6. Known Issues

There are no known issues with the current version of the New.net
Client Application.

7. For More Information

For the latest version of the New.net Client Application and
and more Troubleshooting information, visit http://www.new.net.

8. Version History

BE CAREFULL WHEN UNINSTALLING NEWDOTNET !!!
I strongly suggest first making copies of the DLL's, you may need to restore them, I had to. Some unpredictable results may occur.

This thing really SUCKED. It prevented my Callwave answering machine from working. Callwave kept trying to dial out because it never made contact on startup. I deleted all of the firstlook cookies, there were three of them with alphabetically unrelated names. I removed the new.netdomains with control panel. It seems OK now and my Callwave works again. This cost me a day of my life and should be criminal. I hate these people. At least virus authors are honest about what they do.

I neglected to mention in the previous post that I also uninstalled Bear Share at the same time. Whatever it was it still sucked.

I have to admit that I’m really bothered by possibilities that this thing represents. Last Monday (Aug. 26) it suddenly started showing up on a PC that I was trying to setup. Two days ago I wiped out a PC, installed everything fresh and used windows update to install everything except “Windows Automatic Updating” and SP3 (This is what I had done on the first PC). I left the PC logged on as administrator for the last day and a half or so and FirstLook did NOT install itself.

When does this thing install itself and what are the possibilities for this thing to do something destructive? Can it be used to install a virus? Could it be used to transfer private info from a persons PC to some hacker somewhere else in the world?

I want to know for an absolute fact how it got on the first PC I did and how to keep it from ever getting on another PC ever again.

I might add that this is the only site I’ve been able to find on the web that is even talking about this. I would have thought that something like this would be big talk everywhere.

It is odd that this issue is not being discussed more widly in public fora. I suppose that most people think of it as just another pop up ad or spam and find a way to get rid of it, or at least make it go away.

I've kept it on my machine as a sort of specimen, and I notice that my machine is tranmitting via the cable modem for a while when the FirstLook.com window is setting itself up.

I've posted emails to http://www.theregister.co.uk about this; maybe if someothers do they will cover this new level of abuse. I'll also be posting to some of the MS newsgroups, like microsoft.public.win2000.general. Who else can we write to? Maybe I'll email John Dvorak.

This started happening after downloading IE 6.0 last week. I'm a Microsoft supporter, but agree this is criminal behavior and whomever did this should be punished -- the virus analogy is right on.

Thanks so much for this thread -- I too can't believe there hasn't been more discussion on this ... but once it spreads out I'll bet there will be.

Please, anyone that's had this "infection" or whatever it is, post to the newsgroup

microsoft.public.win2000.general

There is already a thread running there about the issue called "FirstLook.com pop-up application; installed via SP?"

It would be very interesting to find out what's behind the installation of these two programs, FirstLook.com and New.Net. I'm sure Microsoft can figure it out, and if enough people ask, they'll have to deal with it.

I don't belive Microsoft or IE had anything to do with FirstLook. When it began mysteriously popping-up on my computer, it always used Netscape. I have since learned that this phantom software is on several free download programs. It does not appear to be a virus. But FirstLook should be put out of business. I did download a game recently, but I do a lot of downloads usually from CNET and nowhere did it ask for permission to install this item. In any event, I uninstalled New.net and Portal through the Control Panel, and it hasn't come up since. Will have to keep any eye on it though if I continue downloading software.

I think I got firstlook portal from Kazaa, but I will follow the advice here to remove it. Thank you.

Take a look at all the other stuff KaZaA bundles that they think are "useful":
http://www.kazaa.com/en/privacy/bundles.htm

Hey, can someone help me... i also have new.net domains 4.5 and first look portal. They are stuffing up my computer while searching the internet and in some cases on my friends computer they have caused the internet to totally stop running. Can someone give me an exact way to get rid of the 2 un-needed programs on windows 98 and on windows xp home edition, thanks :D

I agree with Spiney.After i had downloaded KaZaa and it's bundle of "useful stuff", i got this "Delfin",b3d projector and this FirstLook Portal thing in my control Panel.I dun think this has anything to do with Microsoft or even the Flash player itself...the culprit is very possibly KaZaA or maybe it has something to do with the DivX 4.12 Codec I installed??? anyway, to be on the safe side, i also deleted the whole of KaZaA......recommend u ppl out there to do the same.anyway,thanks for the ways to delete the thing :)