To remove SpwareQuake:
				=====================

Please save each program and file link in this section 
(http://www.mickyj.com/tools.htm - SPwarequake) to your desktop.



		   *********************************************
   		   * Save the file smitRem.exe to your desktop.*
		   *********************************************

It is a self extracting file.
Doubleclick the smitRem.exe and it will extract the files to a smitRem folder on your 
desktop. Please do not do anything with these files or folders yet. 

				  ****************
				  *Install ewido.*
				  ****************

During the installation, under "Additional Options" uncheck "Install background guard" and 
"Install scan via context menu". Launch ewido.
It will prompt you to update click the OK button (if online) and it will go to the main screen

On the left side of the main screen click update. Click on Start and let it update.
DO NOT run a scan yet. Please exit the program.


			   *******************************
			   *Save Killbox to your desktop.*
			   *******************************


			  *********************************
			  *Save FixSQ.zip to your desktop.*
			  *********************************

Unzip it to extract the FixSF.reg file it contains.


Restart your computer into safe mode now. (Press F8 on system boot and select Windows in Safe mode)

==================================================================================================


Perform the following steps in safe mode:


Go to Add/Remove programs and uninstall SpywareQuake if it is there. 
Do not restart your computer if it asks you to do so.
Look for any other new unknown programs such as Yax, YAZ and Yazzle. Uninstall these.
Do not restart your computer if it asks you to do so.

Doublclick on the FixSQ.reg file to add it to the registry. Answer yes to confirm the merge.

Double-click on Killbox.exe to run it. Put a tick by Standard File Kill.
In the "Full Path of File to Delete" box, copy and paste each of the following lines one at a time:

> C:\WINDOWS\system32\stickrep.dll
> C:\Program Files\SpywareQuake

Click on the button that has the red circle with the X in the middle after you enter each file.
It will ask for confimation to delete the file. Click Yes.

Continue with that procedure until you have pasted the two locations in the 
"Paste Full Path of File to Delete" box.

Killbox might inform you that one or more files do not exist. There are different versions of this 
similar threat. Different threats have different files and names.

If this happens, just continue on with all the files. Be sure you don't miss any.Exit the Killbox.


Open the smitRem folder on the desktop, then double click the RunThis.bat file to start the tool. 

Follow the prompts on screen. Wait for the tool to complete and disk cleanup to finish.


Run Ewido:
Click on scanner. Click Complete System Scan and the scan will begin.
During the scan it will prompt you to clean files, click OK
When the scan is finished, look at the bottom of the screen and click the Save report button.
Save the report for later diagnostics.


Go to Control Panel > Internet Options. Click on the Programs tab then click the "Reset Web Settings" 
button. Click Apply then OK. 


If you are running Active desktop, go to Control Panel > Display. Click on the "Desktop" tab then 
click the "Customize Desktop" button. Click on the "Web" tab. Under "Web Pages" you should see an entry 
checked called something like "Security info" or similar. If it is there, select that entry and click 
the "Delete" button. Click OK then Apply and OK.


Restart back into Windows normally now.

Now go online to http://housecall.trendmicro.com and run an online threat scan for viruses and Spyware.

=========================================================================================================