Please make sure you know what you are doing before performing any of the instructions on this site. You maybe better off downloading a proven spyware scanner and let the program do the cleaning. You may need anti-virus software as well and please allow up to 10 hours to get your system back on its feet again. Please feel free to ask questions, tell us the problem and we will help for FREE.
Downloader | Keylogger | RAT |
Trojan |
Adware
Worm |
Sniffer |
Spoofer |
Toolbar |
Virus |
Probe
If you have a certain web site that keeps popping up please feel free in contact us at spyware at itconsultancy.org
DOWNLOAD NETSPHERE SPYWARE REMOVAL SOFTWARE
These products will remove and protect you from adware, spyware, trojans etc...

Removal instructions for netsphere:
From the doc: ' 1 KeyloggingKeylogging will not work immediatley. First, you must do this: 1. Connect to the target. 2. Open the File System. 3. Upload the keylogging DLL in your local NetSphere directory (khd2.dll) to their C:WINDOWSSYSTEM directory, or wherever their WINDOWSSYSTEM directory is. You can't rename this file. 4. After the upload has finished, go Target > Server > Restart Server. It is still a little buggy, and for some unknown reason, makes some games (namely Quake II) exit unexpectedly.2 Newbie Directions1. The target MUST run the server ("NetSphereServer.exe") on their computer. You can either run this on their computer yourself, or you can rename it to something and then trick them into running it. 2. Get their IP. There are many ways of doing this; the best way is with ICQ. Go to section 5 fore more detailed instructions. 3. Run the client (NetSphereClient.exe). Enter their IP into the "IP or DNS" box, and hit "Connect". Keep an eye on the status bar. Once it has connected, the "Target" button will become active. You can then do stuff to/on the remote computer. 3. When you're done, hit "Disconnect", or just close the client. 3 Client Parameters NetSphereClient.exe /connect (IP or DNS) You can directly connect to an IP with the /connect parameter. NetSphereClient.exe /debug You can have it display debug info (for your prying eyes) with the /debug parameter. If the client is behaving strangely, you may want to have it display various tidbits of information, to assist in tracking down your problem. NetSphereClient.exe /noannounce The client won't try to download the announcements from the NetSphere web server. This is usefull if you don't have internet access from where you are operating. 4 Server Parameters NetSphereServer.exe /visible You can run the server in Visible mode. You can then configure some extra features via the server's GUI. 5 Getting an IP from ICQ1. Right-click on one of your contacts, then select "Info" (near the bottom). 2. Their IP will be in the box labeled "Current/Last IP". 3. Right-click in the IP box, then select "Select All". 4. Right-click in the IP box (again), then select "Copy". 5. Open NetSphere Client. 6. Right-click inside the "IP or DNS" box, then select "Paste". 7. Click on "Connect".
Alias:
Backdoor.NetSphere.127Backdoor.NetSphere.130 Backdoor.NetSphere.131Backdoor.NssKill
Type:
RATKey Logger
Executables:
netsphere129.exe
netsphereclient.exe
netsphereserver.exe
nrsvr.exe
ns.exe
Windowssystem
ssx.exe
EXE files and how to remove them
Dll:
Unknown
DLL files and how to remove them
Registry Items:
HKEY_LOCAL_MACHINE/software/microsoft/windows/currentversion/un
ssx
Protect yourself from spyware and virus attacks PDF
Notes:
Stop processes:netsphere129.exe, netsphereclient.exe, netsphereserver.exe, nrsvr.exe, ns.exe, [system root]\system\nssx.exe
Remove Registry values:
HKEY_LOCAL_MACHINE\microsoftwindowscurrentversion
un
ssx
Remove files:netsphere.txt, netsphere129.exe, netsphereclient.exe, netsphereserver.exe, nrsvr.exe, ns.exe, [system root]\system\nssx.exe
NetSphere:
All topics related to NetSphere spyware or virus on your computer and how to remove NetSphere or fix it.