Be alert! New net transport (audio and video conveyor belt) installation is tricky

Http://article.pcpop.com/show.aspx? Topic_id = 1317935

Because flash get and NetAnts (online ant financial) had not released any new versions earlier, net transport (audio and video conveyor belt) quickly gained favor from Internet users because it was free of charge and supported streaming media download. However, as it grows, software developers turn it into shared software after its 1.9 release. Net transport recently released its latest version 1.93. I tried it but found some unpleasant things.

 
Posting time of flying fog:

Reply [1]: I. I accidentally found "Tricky"

Before downloading the file, I first read the net transport official site update log:

Net transport 1.93 (2004.10.19)

"FTP conveyor belt" and FTP client tools are also released
Correction of some minor errors
You can choose to send or not send guid to RealServer
Fixed the issue where HTTP may incorrectly handle data received as live in some cases.

An FTP client was added in the new version to check that the registration price has not changed. It seems that the author is "responsible" for the user, but the installation file is much larger than the previous version, it reaches 2.12 MB.

After the installation, I did not find any exceptions at first, but then I accidentally found a process named "visionnet. dll" when I checked the process manager, and the memory resources it occupied were 27956kb!

--- Flying over the fog [Tianjin Wei]

Reply [2]: The first response from the author is virus! So we first scanned the disk with our Kaspersky Anti-Virus personal 5.0 + Latest Virus database, but no virus was found. So I am going to manually look for this item named "visionnet. dll", open the resource manager, and suddenly find the C:/program files/visionnet folder while preparing to search.

--- Flying over the fog [Tianjin Wei]

Reply to [3]: Go to the sensitive folder -- C:/Windows directory and check it again. an unexpected visitor: windcheck2.exe was found.

--- Flying over the fog [Tianjin Wei]

Reply [4]: I will go back and check the C:/program files/visionnetfolder. I found a 17lele.exe file in it and ran it with a try (I have already performed ghost on the system, as a result, an installation window named "xinpi leisure and entertainment" is displayed. The "cancel" button is not provided in the window! I have no choice but to install it. After installation, I found that it was a game client similar to the crowd.

--- Flying over the fog [Tianjin Wei]

Reply [5]: Next, I restarted my computer and didn't run any program. I ran "msconfig" to check the startup items and found three more items-one unknown, rundll32, and 17 Lele, they all point to the "HKLM/software/Microsoft/Windows/CurrentVersion/Winlogon" branch.

--- Flying over the fog [Tianjin Wei]

Reply to [6]: Open the task manager and find that two suspicious processes are running: rundll32.exe(there are two rundll32.exe processes, one of which is a normal process) and 17lele. ex _.

--- Flying over the fog [Tianjin Wei]

Reply [7]: At this point, we have fully recognized its true nature-the advertisement program attached to net transport, and the method is extremely bad. This is not prompted in the installer, no description is provided on the Software Update log! However, it takes a lot of time for the author to uninstall this advertising program.

--- Flying over the fog [Tianjin Wei]

Reply [8]: 2. Uninstall is a big problem

Next, I checked the Start menu and did not find the "Xinpai leisure and entertainment" program after installation. I did not find it again when I unmounted it on the control panel!

--- Flying over the fog [Tianjin Wei]

Reply [9]: isn't the uninstall program in its installation folder? I opened the C:/program files/visionnet folder and couldn't find it after a long time! It seems that this is nothing different from the Trojan.

Finally, I searched and checked it carefully, and finally collected all the files of the Program (maybe missing.

If you have installed net transport 1.93, please install the following operations to understand the advertising program:

· Terminate the visionnet. dll and 17lele. ex _ processes in the task manager;
· Line msconfig, deselect the blank name startup Item, rundll32, and 17lele check items;
· In addition to the C:/program files/visionnet folder, delete visionnet.dll1_windcheck2.exe1_nmwizarda14.exe, C:/visionnet under Windows/prefetch under C:/windows. DLL -*****. PF, C:/The VML folder below;
· Open the registry, search for all keywords visionnet, windcheck2, nmwizarda14, and 17lele, and delete all search results;
· Restart the computer.

In addition, it is important to note that uninstalling net transport does not allow you to uninstall the advertisement program. You still need to perform the preceding steps to uninstall it. The above is my attempt. If you have any omissions, please point them out.

--- Flying over the fog [Tianjin Wei]

Reply [10]: 3. Some experiences and summary

If you really like net transport, you can install the international version provided on its homepage, which does not contain this advertisement plug-in, on his main business, the author simply mentions the following words that make people confused:

Download the international version without third-party plug-ins. Sorry :(

I tried to download and install this version, but I did not find this hateful advertisement plug-in. It is: ftp: // nettransport: nettransport@61.153.244.225/nt2setup_multi.exe

Now, we have made it clear. I have always felt that the development and development of a software is inseparable from the support of users. It is understandable to purchase a software with money, however, I have recently discovered that the two software have used the same tactics to force users to install ad plug-ins (the other is the latest audio and video storm, but the ad program that comes with it provides the uninstall function, the user can easily uninstall it), which makes the author feel sorry.

Generally, software can be classified into normal software and ad-ware (software with advertisement, such as messenger plus! , Flashget), spyware (spyware), Trojan and virus. According to the general practice, most shared software has some pop-up Advertisement Windows or toolbar, there are few cases where the user's hard disk is forced like net transport and there is no prompt. I dare not say that net transport is a spyware, but I think it is definitely a very bad ad-ware!

If a good shared software can be used for the sake of users, it will surely bring a good return. On the contrary, it will only arouse users' dislike. Maybe this is the last time I installed net transport. I think many of my friends have the same idea as me. It is hoped that the authors of net transport will be able to correct their excessive behaviors in a timely manner in future version updates. Otherwise, they may suffer losses in the end.