Why of course there is.......Now, if I can find my floppy with the removal instructions, I'll post it in a few minutes.
That'll never happen 2 times in a row-Found it on the first try-Here Ya Go!!!
Here is the way to delete the newdotnet Winsock2 registry keys and restore the winsock. It's quite simple actually.
"go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters.
You should see 2
folders, "NameSpace_Catalog5" and "Protocol_Catalog9".
Click the small "+" (plus) signs next to both of them
Inside both folders, you should see a "Catalog_Entries" folder
Within each of those folders are numbered folders (i.e. 000000000001,000000000002, etc.)
For the "NameSpace_Catalog5" numbered folders:
A. First, make note of how many folders there are
B. Highlight the first one
C. On the righthand side, locate the line "Library Path"
D. In that line, the rightmost column should begin with something similar to
"C:\windows" or "%SystemRoot%".
E. Locate any of the numbered folders that read
"C:\windows\newdotnet2_90.dll" or similar in the "Library Path" line
F. Delete each of those folders referring to "newdotnet"
G. Rename each numbered folder so that they are all consecutive. For
example, if there were 4 folders and you deleted 2 of them, you will need to
rename the remaining folders "000000000001" and "000000000002".
H. Do this by right-clicking the folder name, left-click Rename and then
type in the new number (be absolutely sure you don't delete any of the
zeros).
I. Next, highlight the "NameSpace_Catalog5" folder on the lefthand side.
J. On the right, locate the "Num_Catalog_Entries" line. At the end of this
line is a number in parentheses.
K. Edit that number by doing the following:
i. Double-click "Num_Catalog_Entries"
ii. In the small pop-up window, select "Decimal"
iii. Edit the value of the number on the left to reflect the number of
remaining folders (in the case of the example in #7 above, you would enter
2)
iv. Click OK
For the "Protocol_Catalog9" numbered folders:
A. First, make note of how many folders there are
B. Highlight the first one
C. On the righthand side, you will see a line beginning with
"PackedCatalogItem". Double-click on that word and a small window will
pop-up.
D. In the "Edit Binary Value" window, several columns appear with numbers
and letters. In the last column appears a path that will look something
like, "C:\WINDOWS\NEWDOT~.DLL" or "%SystemRoot%" followed by a long list of
characters.
E. Locate the numbered folders that indicate "C:\WINDOWS\NEWDOT~.DLL" in the
"Edit Binary Value" window described above and DELETE each of them.
F. Rename each remaining numbered folder so that they are all consecutive.
For example, if there were 13 folders and you deleted 2 of them, you will
need to rename the remaining folders "000000000001" through "000000000011".
G. Do this by right-clicking the folder name, left-click Rename and then
type in the new number (be absolutely sure you don't delete any of the
zeros)
H. Next, highlight the "Protocol_Catalog9" folder on the lefthand side.
I. On the right, locate the "Num_Catalog_Entries" line. At the end of this
line is a number in parentheses.
J. Edit that number by doing the following:
i. Double-click "Num_Catalog_Entries"
ii. In the small pop-up window, select "Decimal"
iii. Edit the value of the number on the left to reflect the number of
remaining folders (in the case of the example in #6 above, you would enter
11)
iv. Click OK
K. Close the Registry Editor. Your changes will be automatically saved.
L. Restart your computer and then try accessing the Internet as you would
normally. "
I would add to check the other CurrentControlSet if you have them (I had two more)and do the same there.
After this use a registry search tool and delete any other keys with newdotnet in them.
And try to avoid this spyware to begin with !