Start your computer in safe mode. Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.) Browse to the key: 'HKEY LOCAL MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run' In the right pane, delete the value called 'Windows Security Assistant', if it exists. Browse to the key: 'HKEY LOCAL MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ RunServices' In the right pane, delete the value called 'Windows Security Assistant', if it exists. Browse to the key: 'HKEY CURRENT USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run' In the right pane, delete the value called 'Windows Security Assistant', if it exists. Exit the registry editor. Start Windows Explorer and delete: %SystemDir%\rundll32.vbe %SystemDir%\readme.txt Note: %SystemDir% is a variable (?). By default, this is C:\Windows\System (Windows 95/98/Me), C:\WINNT\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP). Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.) Use the search function in the registry editor to find www.alfa-search.com and restore all the values that CoolWebSearch.alfasearch has changed. (CoolWebSearch.alfasearch has changed your Home Page, Search Page, Search Bar, Search Url, Default Page Url and Search Assistant to www.alfa-search.com) Exit the registry editor.