This is a thorough procedure to remove spyware from your PC, as it is done at a store that charges money to do it. This will fix the great majority of all spyware infestations, but there are some forms of spyware that can require more complex removal procedures. If you still have a spyware problem after this procedure, you should take your computer to a professional.
Right-click the Start button and select Explore.
Spyware typically hides some of its files in the Temp or Temporary Internet
Files; since these folders are designed to hold totally disposable files by
definition, it is generally safe to delete their contents. Right-click the
Start button and select Explore. You will now see a folder in your profile,
with a path like this:
C:\Documents and Settings\Yourname\Start MenuGo to the Tools menu and select Folder Options. Click on the View tab and select �Show hidden files and folders� and then click on �Apply to all folders� above. Click "Okay."
Close the Folder Options dialog box and return to Windows Explorer. Look about six folders above the one you are currently viewing and find a folder named Local Settings. Expand that folder and find the Temp and Temporary Internet Files folders. Delete everything in those folders, except system files that warn you not to remove them. You want to permanently delete the files, not merely move them to the Trash, so hold down the Shift key while pressing Delete. It is not uncommon that spyware which is currently running will prevent you from deleting its own files � if you run into this problem within any of the Temp or Temporary Internet Files folders, you will have to attempt to delete them from Safe Mode (see below).
Then expand the other profiles, for the other users on your machine, find the Temp and Temporary Internet Files folders in them, and empty them also. Do not overlook the Default User profile, empty its temp files too.
Then go to this folder and empty it too (except for system files that warn you not to delete them):
C:\WINDOWS\system32\config\systemprofile\Local SettingsEmpty the other main Temp folders. Their location depends upon which version of Windows you are running � look within the root of C: as well as within the main WINDOWS folder within C: If you are running Windows XP, you may also need to delete your old System Restore Points.
These are all free. When you install each of them, look for the "Update" feature and run it just as you would for an antivirus program.
If you are an advanced user, you may want to download HijackThis as well. Be aware that this program requires a certain level of sophistication to use, or at least the patience to slowly read through all the information within it.
Restart your machine and press F8 during the text phase of startup to get to the Advanced Boot Menu. Select Safe Mode. This mode loads only the bare minimum services and drivers, which stops spyware from hiding or reproducing while you are running the scanners. Then run each of the four tools listed above to remove what they can find.
Finally, remember to reset your options within Windows Explorer back to normal: go to the Tools menu and select Folder Options. Click on the View tab and select "Do not show hidden files and folders" and then click on "Apply to all folders." Click �Okay.�
Since spyware can impair a computer�s ability to connect to the internet, it makes sense to download and install these programs when your computer is healthy so you already have them in case you get infected.
Norton Antivirus 2004 and 2005 do provide some spyware protection. It is best to use all of these programs and not rely on any one to be the magic bullet. They each have different strengths in detecting and removing forms of spyware.
Do not use the System Restore within Windows XP as a method for getting rid of viruses or spyware � it usually makes these types of problems worse.
Thanks to Chris Brown for kindly providing and revising these instructions. Please email me at sbowne@ccsf.edu and let me know how they work out for you.
Last modified 11-17-04