I cannot remove spyware

[Gsexer]

I have been trying to use Spyware doctor, and Spybot S&D, and it detects this spyware... NEWDOTNET. I try to remove it and Spyware doctor cannot remove it after a reboot. Spybot S&D tells me that the DLL cannot be deleted cause it is being used in the memory. Of course I have not backed up to my backup in almost a year so I cannot revert back to my backup cause it has been too long.

How do I get rid of that crap?

[Anjow]

Are you running the removal programs in safe mode?

What's the name of the DLL?

If it's not a core Windows DLL you could try doing start > run "regsvr32 /u filename.dll" and try again.

[RJARRRPCGP]

Prepare to fix it the Microsoft way. (reformat and reinstall) Sorry.

[Trap05]

If newdotnet appears in the add/remove programs list uninstall it and reboot it will restore your network settings. If not I can send you a program that will repair your network settings easily. PM me if you need it.

[dylskee]

Prepare to fix it the Microsoft way. (reformat and reinstall) Sorry.

LOL, thats pretty funny! But true most of the time.

Here's some info for you, hope this helps. http://www.newdotnet.com/removal.html

[Gsexer]

Are you running the removal programs in safe mode?

What's the name of the DLL?

If it's not a core Windows DLL you could try doing start > run "regsvr32 /u filename.dll" and try again.
The Name of the DLL is nncore.DLL... Sounds like I could be screwed.

Prepare to fix it the Microsoft way. (reformat and reinstall) Sorry.I guess if it really came down to it I could start moving personal stuff to the other HD but then I run the risk of moving other crap that I am trying to get rid of besides this one.

If newdotnet appears in the add/remove programs list uninstall it and reboot it will restore your network settings. If not I can send you a program that will repair your network settings easily. PM me if you need it. Unfortunately it is not in the add/remove programs.

LOL, thats pretty funny! But true most of the time.

Here's some info for you, hope this helps. http://www.newdotnet.com/removal.html

I have the uninstaller where the site says it is, and after uninstalling it a couple times I figured out that the uninstaller was not uninstalling.

[curtis1552]

what about booting from a linux Live CD and remoing the file manually? (i'd reccomend the Ubutu distro)

[Anjow]

The Name of the DLL is nncore.DLL... Sounds like I could be screwed.

Do you know where the DLL is located? This could tell you:

http://technet.microsoft.com/en-gb/sysinternals/bb896656.aspx

I ask because it seems to you the DLL sounds important, but to me it does not.

[turd]

From this link it looks like there are a few processes(10), reg entries(22) and dll's(6) that gotta go. Thats some nasty stuff.

This gives detailed instructions and the files. Happy hunting.

http://www.spywareremove.com/removeNewDotNet.html

btw nncore is not one of the dll files associated with this, according to this link

[Anjow]

btw nncore is not one of the dll files associated with this, according to this link

That's surprising because the uninstaller file is called NNuninstall or something similar.

[turd]

That's surprising because the uninstaller file is called NNuninstall or something similar.


Yea I thought that too. Thats why I threw that in. So it's possible that the link I gave is inaccurate as I have not tested the fix from either.

I sure wouldn't trust an uninstaller from the scum that would throw something like that on a rig anyways.

[dark_15]

Here is what I found with a couple of searches:

http://forums.techguy.org/malware-removal-hijackthis-logs/626793-solved-nncore-dll-trojan-horse.html

[RJARRRPCGP]

I said that, because when I gotten NewDotNet, when it was removed, was impossible to access the internet!
That was a long time ago.

[Drinkyoghurt]

btw, after you have removed that newdotnet thing, download Firefox and use that instead of IE, if you keep using IE you will keep getting spyware/malware/trojans very easily

[Gsexer]

From this link it looks like there are a few processes(10), reg entries(22) and dll's(6) that gotta go. Thats some nasty stuff.

This gives detailed instructions and the files. Happy hunting.

http://www.spywareremove.com/removeNewDotNet.html

btw nncore is not one of the dll files associated with this, according to this link

Interesting. Funny thing is that DLL is in the newdotnet folder.

Here is what I found with a couple of searches:

http://forums.techguy.org/malware-removal-hijackthis-logs/626793-solved-nncore-dll-trojan-horse.html

That is definately a good thread there. Thanks for the info

btw, after you have removed that newdotnet thing, download Firefox and use that instead of IE, if you keep using IE you will keep getting spyware/malware/trojans very easily

Funny thing is I have been using Firefox for about a year now and the Newdotnet stuff was downloaded on October. Weird. I really need to uninstall IE.

I am gonna get on this stuff tonight after dinner. Thanks again for all the info.

[thideras]

Funny thing is I have been using Firefox for about a year now and the Newdotnet stuff was downloaded on October. Weird. I really need to uninstall IE.

I am gonna get on this stuff tonight after dinner. Thanks again for all the info.FYI, you can't remove IE, it is a part of Windows ;)

[Anjow]

Interesting. Funny thing is that DLL is in the newdotnet folder.

I'd unregister and delete it then. Might not be the cleanest approach to removal, mind.