• Instructions of how to restart in safe mode can be found here.
• Windows 2000 and XP, restart in Safe Mode with Networking and return to this webpage.
• Windows ME, 98, 98SE, Please print these instructions and download the appropriate programs. List of programs.

• Go into the control panel, select folder options, and go to the "View" tab and select "Show hidden files and folders" if it is not already selected. pic

• Go to the Start Menu and search files and folders.
• Search for "cookies."
• Go through the folders called "cookies" and delete the files within the folders. You cannot delete "index.dat."

• Go to the Start Menu and search files and folders.
• Search for folders named "Temp."
• This will bring up any file or folder with "temp" in the name. Go through and delete files in folders named "Temp" and "Temporary Internet Files."

A. Spybot Search and Destroy Download

• Run the application and download the updates as prompted on your first run.
• If you have ran the application already, you can select "Search for Updates" on the main menu. pic
• After scanning and cleaning if Spybot asks you to restart to continue deleting, accept. Restart the computer and go back into safe mode with networking and let spybot finish.
• Watch Demonstration

B. SpySweeper (14 Day Trial) Download

• Just as Spybot, run the application and download the updates as prompted on your first run.
• Again, if you ran this application already, search for updates by going to "Options" on the side menu and clicking "Update Definitions." pic

C. XoftSpy (Trial Version) Download

• Upon startup, this program will prompt you to download updates if updates are available.
• This is a free version of XoftSpy, this will scan but not remove.
• After scanning you will attain a list of what was found on your machine and where it is. Go through the list and delete the files manually by using the given address. (if it says "Software\SideBar," it will be located in your registry under HKEY_LOCAL_MACHINE\ or HKEY_CURRENT_USER\). View Demonstration
• Purchasing this application will allow you to use the delete function in the program.

D. Hijack This! Download

• This program will fix hijacked search hooks, changing homepages, and removing toolbars in your Internet Explorer.
• Before running this program, you will need to copy the program into a new folder in order to keep the backup information safe.
• To run the program click "Do a system scan only." You will not need a logfile, however, you may create a log file to use in a forum or to e-mail to us for assistance.
• When the scan is complete a list of program settings and services will be generated.
• Select all that has anything to do with Internet Explorer like "extra button" or "extra tools."
• To be sure of what you are checking and leaving unchecked you will need to search Google. (i.e. I searched for "jusched.exe" in Google and found this webpage.)
• Remember, for assistance please e-mail me at jsadler@myers.edu.
• Watch Demonstration

E. Panda Software Activescan

• Go to Panda Sofware's Activescan by clicking Here. (Users running 98, 98SE, and ME will need to reboot out of Safe Mode at this time in order to use the internet)
• When Activescan is finished running you will be given a list of files that are known Malware files.
• Save the list to your desktop by clicking "Save Report" to print or to view on your desktop later. If there is nothing in the list you can move on to the next step.
• Browse your computer using the addresses in the log file and delete the listed files.

F. RegSeeker Download

• The purpose for this program is to restore the default window sizes and remove startup entries to restore system performance.
• Run the application and select "Startup entries" on the right-hand side of the program.
• These are the entries that tell your computer to run these programs when your computer starts up. It is not necessary to keep any of these entries unless they are used in order to operate extra buttons on your keyboard, mouse, and antivirus applications. Use a Google search on the file names to determine if any of these entries should stay or e-mail me.
• Select the entries using ctrl+lmb (left mouse button).
• Delete them by hitting the Delete key on your keyboard and confirm your deletion.
• To restore original default window sizes that may have changed due to adware and spyware applications click "Histories..." and select "Clean StreamMRU/Stream keys." pic
• Click Ok to proceed.
• You can now restart your computer normally.