Spyware is a cause of pop-up ads, system setting changes, alterations to homepage links and search pages, and particularly, it reduces performance and destabilizes systems. Spyware represents a major challenge that can be frustrating and exhausting for computer users and system administrators. How can one safely and effectively eliminate spyware and “uproot it completely”?

Step 1: Backup Your Data
Before attempting to remove any spyware, you must back up important data. Some spyware can significantly alter system settings, and attempting to remove them may cause errors or affect the entire system. A good approach is to use full disk backup software like Norton Ghost or Acronis True Image. At the very least, you should copy important files in the My Documents folder. Some programs like Spybot Search & Destroy also perform limited backup functions, but creating backups manually is an important step you should not overlook.
Use System Restore in Windows XP; this utility allows the system to revert to a stable state in case of issues. System Restore can help you return to a backup point when the system was still “clean”—not infected by spyware.
If you suspect that spyware has been in your system for weeks, it’s likely that the restore points created by System Restore are also infected. Therefore, you should delete any suspicious restore points. Some antivirus and anti-spyware software can detect infected restore points, but most of these programs cannot completely “clean” spyware.
The best way to remove all restore points:
- Right-click on My Computer
- Click on Properties, and select the System Restore tab
- Check the option “Turn off System Restore on all drives” and click Apply. Wait a few minutes for Windows to remove all restore points.
- After the system has been cleared, return to the dialog box and uncheck “Turn off System Restore on all drives”. This will allow System Restore to restart without any backup points.
- To ensure a good recovery point in the future, create a new restore point. Go to Start -> Help and Support and select “Undo changes to your computer with System Restore.”. At this point, System Restore will run and create a new restore point for you.
Step 2: Observe Carefully
The quickest way to scan for spyware is to go to Add/Remove Programs. Why scan spyware in Add/Remove Programs? Here are some reasons. Firstly, Add/Remove Programs is a crucial location for analyzing Windows system issues and installed software on your computer. The list of software in Add/Remove Programs will inform you of what software is being used on the computer and identify which programs need to be backed up.
Next, Add/Remove Programs can help identify peer-to-peer file-sharing applications such as LimeWire or Kazaa. These peer-to-peer applications allow the sharing of unlicensed software, music, movies, images, etc., and are also environments that “nurture” and spread spyware. Therefore, use Add/Remove Programs to eliminate file-sharing applications. It would be pointless to clean up viruses and spyware while still maintaining the “source of infection”.
Finally, by carefully examining the Add/Remove Programs list, you may find secretly installed programs, or adware that was stealthily installed during the installation of an application.
In the list of found programs, be cautious and remove any suspicious software. The following software is 99% likely to be unwanted for users, often displaying ads and altering “strange behaviors” in browsers:
- GAIN
- Media Access
- Media Gateway
- My Web Search
- MySearch
- Search Assistant – My Search
- Secure Delivery
- Select CashBack
- Surf Accuracy
- The Best Offers
- WebRebates
- Web Savings from eBates
- WhenU Save
- YourSiteBar
- Zango
When these programs have been removed, they may request a restart. If just one of them requests a restart, reply “No” until all have been removed from the Add/Remove list.
Google is also a useful tool for removing unwanted software from the list. Searching by the names of strange software is a good way to track down information about unverified software. If you want to know which programs are running in the system, check them in Task Manager (press Ctrl+Shift+Esc in Windows XP) and search the database of verified programs at PC Pitstop’s known software database. If you are uncertain whether a software is spyware or not, it’s best to leave it for now. You still have the chance to remove it in later steps.
Step 3: Choose Anti-Spyware Software
If the system is only infected with adware, Add/Remove Programs may be effective. But if the infection is more severe, it is best to use dedicated anti-spyware software. These programs can completely remove infected files and protect the system from future infections.
Before considering the purchase of an expensive spyware removal program, you should try out some free spyware removal tools. Not all free tools are ineffective; the following free software options are actually quite powerful and highly rated, such as Ad-Aware SE Personal, Spybot Search & Destroy, and Microsoft Windows AntiSpyware.
Some leading spyware removal software, like SpySweeper, is also affordable and boasts a high success rate in removing spyware, making it an attractive option.
If you prefer an all-in-one toolkit that includes spyware removal, virus protection, and firewalls, programs like Norton Internet Security 2006 and McAfee are good choices and are reasonably priced.
Note: Some anti-spyware software can be very dangerous. Many such programs released on the Internet are often ineffective and are frequently advertised through Google. These programs can be so bad that they fail to remove any spyware and may even spread spyware themselves. Additionally, some other software employs tactics to “squeeze money” from users, forcing them to continue using and paying for their services after download.
Step 4: Remove Spyware
In general, anti-spyware software operates on basic principles. When loaded, these programs scan running processes, files, and Registry keys to identify unwanted programs and settings. Once the scan is complete, they provide a report of their findings, and you can choose to remove spyware at this stage. Users have the option to either remove all spyware immediately or quarantine it for potential future use.
However, do not place too much trust in these tools. A file or process identified as spyware may not necessarily be spyware. In reality, each spyware removal tool has different capabilities and criteria for identifying unwanted software. Therefore, using two or more anti-spyware programs is often the best and most effective approach. For example, both Spybot and Ad-Aware may not detect the spyware named ‘180Solution’ or Zango, while Microsoft AntiSpyware does. But among these three, only Spybot has the ability to disable virus alerts in Windows Security Center.
Once your system is performing well, make sure to reactivate System Restore and create a clean restore point. This is useful if you wish to revert to a clean state when the system becomes infected again.
Note on Cookies
Some spyware programs scan and remove cookies that are reported as tracking cookies. These cookies are often used for advertising purposes by websites, monitoring your browsing behavior to deliver ads that match your preferences. However, users gain little benefit from these annoying and irrelevant ads. Therefore, when such cookies are detected, it is best to allow your anti-spyware software to clean them out.
Step 5: Troubleshooting Internet Issues
Some spyware removal tools may still not completely eliminate threats; your defense system needs to be robust and regularly updated. Regularly check for the latest updates from your software providers. Most anti-spyware software supports automatic updates for the latest spyware definitions and patches.
Next, keep security information updated, particularly regarding spyware. Leading anti-spyware and antivirus software providers like Symantec, McAfee, and Computer Associates offer warning information about significant threats on their websites.
For help and spyware removal methods, several forums on the Internet are excellent places to visit. Two of the best websites for this are Spyware Warrior and PC Pitstop. Before posting your issue on the forum, be sure to read related questions; the answer you seek may already be available.
Minh Phuc