Leo Laporte
The Tech Guy
2–5p ET Sat & Sun

Sponsors

Leo Links

RSS
Colophon



Main > Removing Spyware

Edit | Read | Hist | Prt


Main.RemovingSpyware History

Hide minor edits - Show changes to markup

February 16, 2005, at 11:24 AM by Leo Laporte -
Changed line 9 from:
  1. I recommend using http://www.mozilla.org/ Mozilla or http://www.mozilla.org/products/firefox/ Firefox to avoid future hijacking. If you must use Internet Explorer install http://www.javacoolsoftware.com/spywareblaster.html Spyware Blaster to block future infections. Better yet, follow Steve Gibson’s instructions for UsingInternetExplorerSafely.
to:
  1. I recommend using http://www.mozilla.org/ Mozilla or http://www.mozilla.org/products/firefox/ Firefox to avoid future hijacking. If you must use Internet Explorer install http://www.javacoolsoftware.com/spywareblaster.html Spyware Blaster or Microsoft’s http://microsoft.com/spyware anti-Spyware program (recommended) to block future infections.
February 16, 2005, at 08:55 AM by Leo Laporte -
Changed line 5 from:
  1. Then remove spyware using the free http://www.lavasoftusa.com/ AdAware, http://www.safer-networking.org/ Spybot S&D, and Microsoft’s http://microsoft.com/spyware anti-Spyware program. Update, scan and remove all the infections you can, then turn on the immunization feature of Spybot or the PC Guard feature of Microsoft. This should take care of the spyware, but often is insufficient to remove browser hijackers.
to:
  1. Then remove spyware using the free http://www.lavasoftusa.com/ AdAware, http://www.safer-networking.org/ Spybot S&D, and Microsoft’s http://microsoft.com/spyware anti-Spyware program. Update, scan and remove all the infections you can, then turn on the immunization feature of Spybot or the Real Time Protection and browser protection features of Microsoft’s program. This should take care of the spyware, but often is insufficient to remove browser hijackers.
February 16, 2005, at 08:48 AM by Leo Laporte -
Changed line 3 from:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system, please see {{CreatingAnAntivirusBootCD}} for further details. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro, http://support.f-secure.com/enu/home/ols.shtml F-Secure’sonline scanner or http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
to:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system, please see {{CreatingAnAntivirusBootCD}} for further details. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro, F-Secure’s http://support.f-secure.com/enu/home/ols.shtml online scanner, or http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
February 16, 2005, at 08:48 AM by Leo Laporte -
Changed line 3 from:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system, please see {{CreatingAnAntivirusBootCD}} for further details. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro and http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
to:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system, please see {{CreatingAnAntivirusBootCD}} for further details. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro, http://support.f-secure.com/enu/home/ols.shtml F-Secure’sonline scanner or http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
February 16, 2005, at 08:45 AM by Leo Laporte -
Changed lines 11-28 from:

Spyware is not a problem on Macintosh computers. Yet.


Check out a new online service http://auditmypc.com/ AuditMyPC which offers free security tests for your firewall, popup blocker, and a spyware scan, too.

Advanced users and friends of such: Something new in a way. Have trouble getting spyware to stay gone? There’s a key inside your registry that reloads stuff back into your startup even if your clear it from your msconfig. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg — I’ve seen WinToolsA have keys there. If you clear the checkbox from it from MSConfig, it will constantly recheck and if your even remove it from your Run key it will reappear. If you have trouble with Spyware staying gone, look there. http://www.drcomputer.info Dr. Computer

PC Review has a great article, explaining what spyware is and how to get rid of it. http://www.pcreview.co.uk/article-7086.php Here is a link

Paul Tevis writes:

When you download the instant messenger, AIM, make sure you do not install the weatherbug. That is spyware! So, be careful to not install that.

BenListening writes:

http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&DisplayLang=en Microsoft® Windows AntiSpyware (formerly Giant)
I downloaded & ran Microsoft® Windows AntiSpyware (Beta) just today (1–8−05)
and it immediatly found SearchSquire(some adware), which Spybot S&D, SpywareBlaster, & Ad-Aware SE never saw. SearchSquire is an Internet Explorer sidebar containing paid links that open when you use search engines. Located in : HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings\ZoneMap\Domains\searchsquire.com
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings\ZoneMap\Domains\searchsquire.com * 4 on my XP machine.

to:

Spyware is not a problem on Macintosh computers. Yet.

February 16, 2005, at 08:44 AM by Leo Laporte -
Changed line 5 from:
  1. Then remove spyware using the free http://www.lavasoftusa.com/ AdAware and http://www.safer-networking.org/ Spybot S&D. Update both, scan and remove all the infections you can, then turn on the immunization feature of Spybot. This should take care of the spyware, but often is insufficient to remove browser hijackers.
to:
  1. Then remove spyware using the free http://www.lavasoftusa.com/ AdAware, http://www.safer-networking.org/ Spybot S&D, and Microsoft’s http://microsoft.com/spyware anti-Spyware program. Update, scan and remove all the infections you can, then turn on the immunization feature of Spybot or the PC Guard feature of Microsoft. This should take care of the spyware, but often is insufficient to remove browser hijackers.
February 01, 2005, at 09:25 PM by BlueBoi -
Changed line 3 from:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system. [We need a tutorial on {{CreatingAnAntivirusBootCD}}]. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro and http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
to:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system, please see {{CreatingAnAntivirusBootCD}} for further details. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro and http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
January 25, 2005, at 07:01 AM by leo -
Changed line 13 from:

Advanced users and friends of such: Something new in a way. Have trouble getting spyware to stay gone? There’s a key inside your registry that reloads stuff back into your startup even if your clear it from your msconfig. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg — I’ve seen WinToolsA have keys there. If you clear the checkbox from it from MSConfig, it will constantly recheck and if your even remove it from your Run key it will reappear. If you have trouble with Spyware staying gone, look there. http://www.drcomputer.info Dr. Computer

to:

Changed line 15 from:

PC Review has a great article, explaining what spyware is and how to get rid of it. http://www.pcreview.co.uk/article-7086.php Here is a link

to:

Check out a new online service http://auditmypc.com/ AuditMyPC which offers free security tests for your firewall, popup blocker, and a spyware scan, too.

Changed lines 17-18 from:

Paul Tevis writes:

When you download the instant messenger, AIM, make sure you do not install the weatherbug. That is spyware! So, be careful to not install that.

to:

Advanced users and friends of such: Something new in a way. Have trouble getting spyware to stay gone? There’s a key inside your registry that reloads stuff back into your startup even if your clear it from your msconfig. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg — I’ve seen WinToolsA have keys there. If you clear the checkbox from it from MSConfig, it will constantly recheck and if your even remove it from your Run key it will reappear. If you have trouble with Spyware staying gone, look there. http://www.drcomputer.info Dr. Computer

Added lines 19-23:

PC Review has a great article, explaining what spyware is and how to get rid of it. http://www.pcreview.co.uk/article-7086.php Here is a link

Paul Tevis writes:

When you download the instant messenger, AIM, make sure you do not install the weatherbug. That is spyware! So, be careful to not install that.

Changed line 28 from:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings\ZoneMap\Domains\searchsquire.com * 4 on my XP machine.

to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings\ZoneMap\Domains\searchsquire.com * 4 on my XP machine.

January 08, 2005, at 03:50 PM by BenListening -
Changed lines 21-24 from:

http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&DisplayLang=en Microsoft® Windows AntiSpyware (formerly Giant)

to:

http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&DisplayLang=en Microsoft® Windows AntiSpyware (formerly Giant)
I downloaded & ran Microsoft® Windows AntiSpyware (Beta) just today (1–8−05)
and it immediatly found SearchSquire(some adware), which Spybot S&D, SpywareBlaster, & Ad-Aware SE never saw. SearchSquire is an Internet Explorer sidebar containing paid links that open when you use search engines. Located in : HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings\ZoneMap\Domains\searchsquire.com
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings\ZoneMap\Domains\searchsquire.com * 4 on my XP machine.

January 08, 2005, at 03:18 PM by BenListening -
Changed lines 20-21 from:

BenListening writes :http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&DisplayLang=en Microsoft® Windows AntiSpyware (formerly Giant)

to:

BenListening writes:

http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&DisplayLang=en Microsoft® Windows AntiSpyware (formerly Giant)

January 08, 2005, at 03:17 PM by BenListening -
Changed lines 20-22 from:

BenListening writes :
Microsoft® Windows AntiSpyware (Beta) (formerly Giant)
http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&DisplayLang=en

to:

BenListening writes :http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&DisplayLang=en Microsoft® Windows AntiSpyware (formerly Giant)

January 08, 2005, at 03:02 PM by BenListening -
Changed lines 18-22 from:

When you download the instant messenger, AIM, make sure you do not install the weatherbug. That is spyware! So, be careful to not install that.

to:

When you download the instant messenger, AIM, make sure you do not install the weatherbug. That is spyware! So, be careful to not install that.

BenListening writes :
Microsoft® Windows AntiSpyware (Beta) (formerly Giant)
http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&DisplayLang=en

December 27, 2004, at 11:49 PM by paul -
Changed line 17 from:

Paul Tevis writes:

to:

Paul Tevis writes:

December 27, 2004, at 11:49 PM by paul -
Added lines 16-18:

Paul Tevis writes:
When you download the instant messenger, AIM, make sure you do not install the weatherbug. That is spyware! So, be careful to not install that.

November 21, 2004, at 03:22 PM by Steven Brock -
Changed line 13 from:
  1. Advanced users and friends of such: Something new in a way. Have trouble getting spyware to stay gone? There’s a key inside your registry that reloads stuff back into your startup even if your clear it from your msconfig. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg — I’ve seen WinToolsA have keys there. If you clear the checkbox from it from MSConfig, it will constantly recheck and if your even remove it from your Run key it will reappear. If you have trouble with Spyware staying gone, look there.
to:

Advanced users and friends of such: Something new in a way. Have trouble getting spyware to stay gone? There’s a key inside your registry that reloads stuff back into your startup even if your clear it from your msconfig. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg — I’ve seen WinToolsA have keys there. If you clear the checkbox from it from MSConfig, it will constantly recheck and if your even remove it from your Run key it will reappear. If you have trouble with Spyware staying gone, look there. http://www.drcomputer.info Dr. Computer

November 21, 2004, at 03:21 PM by Steven Brock -
Changed line 13 from:

Advanced users and friends of such: Something new in a way. Have trouble getting spyware to stay gone? There’s a key inside your registry that reloads stuff back into your startup even if your clear it from your msconfig. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg — I’ve seen WinToolsA have keys there. If you clear the checkbox from it from MSConfig, it will constantly recheck and if your even remove it from your Run key it will reappear. If you have trouble with Spyware staying gone, look there.

to:
  1. Advanced users and friends of such: Something new in a way. Have trouble getting spyware to stay gone? There’s a key inside your registry that reloads stuff back into your startup even if your clear it from your msconfig. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg — I’ve seen WinToolsA have keys there. If you clear the checkbox from it from MSConfig, it will constantly recheck and if your even remove it from your Run key it will reappear. If you have trouble with Spyware staying gone, look there.
November 21, 2004, at 03:20 PM by Steven Brock -
Added lines 13-14:

Advanced users and friends of such: Something new in a way. Have trouble getting spyware to stay gone? There’s a key inside your registry that reloads stuff back into your startup even if your clear it from your msconfig. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg — I’ve seen WinToolsA have keys there. If you clear the checkbox from it from MSConfig, it will constantly recheck and if your even remove it from your Run key it will reappear. If you have trouble with Spyware staying gone, look there.

November 20, 2004, at 05:35 PM by wozniak -
Changed line 3 from:
  1. Start by killing any viruses and trojan horses by pooping on the floor. Boot to a CD with an up-to-date antivirus and disinfect the system. [We need a tutorial on {{CreatingAnAntivirusBootCD}}]. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro and http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
to:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system. [We need a tutorial on {{CreatingAnAntivirusBootCD}}]. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro and http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
November 13, 2004, at 10:33 AM by wordsworth -
Changed line 3 from:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system. [We need a tutorial on {{CreatingAnAntivirusBootCD}}]. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro and http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
to:
  1. Start by killing any viruses and trojan horses by pooping on the floor. Boot to a CD with an up-to-date antivirus and disinfect the system. [We need a tutorial on {{CreatingAnAntivirusBootCD}}]. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro and http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
November 05, 2004, at 08:53 AM by Kalic -
Changed line 3 from:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system. [We need a tutorial on CreatingAnAntivirusBootCD]. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro and http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
to:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system. [We need a tutorial on {{CreatingAnAntivirusBootCD}}]. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro and http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
September 28, 2004, at 05:02 AM by priz -
Changed lines 11-13 from:

Spyware is not a problem on Macintosh computers. Yet.

to:

Spyware is not a problem on Macintosh computers. Yet.

PC Review has a great article, explaining what spyware is and how to get rid of it. http://www.pcreview.co.uk/article-7086.php Here is a link

July 29, 2004, at 12:38 PM by Leo Laporte -
Changed line 3 from:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system. [We need a tutorial on creating an anti-virus boot CD]. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro and http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
to:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system. [We need a tutorial on CreatingAnAntivirusBootCD]. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro and http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
July 29, 2004, at 12:03 PM by Leo Laporte -
Changed line 9 from:
  1. I recommend using http://www.mozilla.org/ Mozilla or http://www.mozilla.org/products/firefox/ Firefox to avoid future hijacking. If you must use Internet Explorer install http://www.javacoolsoftware.com/spywareblaster.html Spyware Blaster to block future infections.
to:
  1. I recommend using http://www.mozilla.org/ Mozilla or http://www.mozilla.org/products/firefox/ Firefox to avoid future hijacking. If you must use Internet Explorer install http://www.javacoolsoftware.com/spywareblaster.html Spyware Blaster to block future infections. Better yet, follow Steve Gibson’s instructions for UsingInternetExplorerSafely.
July 29, 2004, at 12:02 PM by Leo Laporte -
Added lines 1-2:

Wikipedia:Spyware Spyware is any program that hides on your system with the intent of collecting marketing information about you and your surfing habits, and/or displaying pop-ads on your screen. Spyware is currently the most annoying problem on the Internet, and in my experience, the single most common cause of unreliability and slowdowns on Windows machines.

Changed lines 9-11 from:
  1. I recommend using http://www.mozilla.org/ Mozilla or http://www.mozilla.org/products/firefox/ Firefox to avoid future hijacking. If you must use Internet Explorer install http://www.javacoolsoftware.com/spywareblaster.html Spyware Blaster to block future infections.
to:
  1. I recommend using http://www.mozilla.org/ Mozilla or http://www.mozilla.org/products/firefox/ Firefox to avoid future hijacking. If you must use Internet Explorer install http://www.javacoolsoftware.com/spywareblaster.html Spyware Blaster to block future infections.

Spyware is not a problem on Macintosh computers. Yet.

July 29, 2004, at 12:01 PM by Leo Laporte -
Changed line 5 from:
  1. Read up on browser hijackers at http://www.spywareinfo.com/articles/hijacked/ SpywareInfo.com. You may need to use a dedicated tool. Start with http://www.spychecker.com/program/hijackthis.html Hijack This to figure out the name of the infection. Removal varies for each hijacker. Search Google for the name and you’ll find manual removal instructions online. Common hijackers include CoolWebSearch, Windows Search Assistant
to:
  1. Read up on browser hijackers at http://www.spywareinfo.com/articles/hijacked/ SpywareInfo.com. You may need to use a dedicated tool. Start with http://www.spychecker.com/program/hijackthis.html Hijack This to figure out the name of the infection. Common hijackers include http://www.spysweeper.com/remove-coolwebsearch.html Cool Web Search and http://www.180searchassistant.com/uninstall.html 180 search Assistant. For a list of all the known Browser Hijacking programs and removal tools visit http://sysinfo.org/bholist.php Sysinfo.org. Searching Google can also be useful in finding removal help.
Changed line 7 from:
  1. I recommend using http://www.mozilla.org/ Mozilla or http://www.mozilla.org/products/firefox/ Firefox to avoid future hijacking. If you must use Internet Explorer install http://www.javacoolsoftware.com/spywareblaster.html Spyware Blaster to block future infections.
to:
  1. I recommend using http://www.mozilla.org/ Mozilla or http://www.mozilla.org/products/firefox/ Firefox to avoid future hijacking. If you must use Internet Explorer install http://www.javacoolsoftware.com/spywareblaster.html Spyware Blaster to block future infections.
July 29, 2004, at 11:54 AM by Leo Laporte -
Changed line 1 from:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system. [We need a tutorial on creating an anti-virus boot CD). You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro and http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
to:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system. [We need a tutorial on creating an anti-virus boot CD]. You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro and http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
July 29, 2004, at 11:53 AM by Leo Laporte -
Changed lines 1-7 from:

Describe RemovingSpyware here.

to:
  1. Start by killing any viruses and trojan horses. Boot to a CD with an up-to-date antivirus and disinfect the system. [We need a tutorial on creating an anti-virus boot CD). You can also use online antivirus checkers like http://housecall.antivirus.com Housecall from Trend Micro and http://www.pandasoftware.com/products/activescan/ Panda’s ActiveScan.
  2. Then remove spyware using the free http://www.lavasoftusa.com/ AdAware and http://www.safer-networking.org/ Spybot S&D. Update both, scan and remove all the infections you can, then turn on the immunization feature of Spybot. This should take care of the spyware, but often is insufficient to remove browser hijackers.
  3. Read up on browser hijackers at http://www.spywareinfo.com/articles/hijacked/ SpywareInfo.com. You may need to use a dedicated tool. Start with http://www.spychecker.com/program/hijackthis.html Hijack This to figure out the name of the infection. Removal varies for each hijacker. Search Google for the name and you’ll find manual removal instructions online. Common hijackers include CoolWebSearch, Windows Search Assistant
  4. I recommend using http://www.mozilla.org/ Mozilla or http://www.mozilla.org/products/firefox/ Firefox to avoid future hijacking. If you must use Internet Explorer install http://www.javacoolsoftware.com/spywareblaster.html Spyware Blaster to block future infections.

Creative Commons License

This work is released under a Creative Commons License.
Built with pmwiki-2.2.0-beta19