Monday, January 16, 2012

How to Manually Delete Spyware From Windows XP

Spyware is annoying and can compromise your computer security. It's also very hard to get rid of. There are a number of free software programs that scan your computer for spyware, however sometimes these programs overlook troublesome areas. With the help of a few utilities, you can manually go in and delete certain spyware elements from your computer that a normal spyware removal program doesn't recognize.
Instructions
1 Boot your computer in safe mode. Repeatedly press the "F8" key on your keyboard to enter the Windows advanced options menu. Select "Safe Mode with Networking" to allow you to have internet access while in safe mode. Safe mode only enables essential Windows processes and programs, which makes removing spyware possible.


2 Click on "Start" and select "Control Panel." Double-click on "Add or Remove Programs." Search for unwanted spyware programs and click on "Remove." Note that many spyware programs will not allow you to remove them without being in Windows safe mode. Restart the computer if necessary, entering back into safe mode.


3 Click on "Start" and select "My Computer." Click on "Tools" in the file bar and select "Folder Options." Select the "View" tab and enable the show hidden files and folders option. Click "OK" and then double-click on "Local Disk (C:)." Delete any files and folders that do not belong there.


4 Double-click on the "Documents and Settings" icon, double-click on "All Users" and enter the "Application Data" folder. Search for suspicious looking files or folders. Right click and delete anything that you are sure is spyware. Navigate back to the "Local Disk (C:)" folder. Repeat this step in the "C:\Program Files\Common Files" folder and the "C:\Windows\system32" folder. Note that the system32 folder is rather large so you should sort items by the date they were created. Verify any item as spyware before you delete it.


5 Navigate to the "C:\Windows\Download Program Files" and delete all files stored in the folder. Note that it is safe to completely delete these files and that you might have to delete them more than once.


6 Click on "Start" and click on "Run." Type in "regedit" and click "OK" to enter the Windows registry editor. Browse to the "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion" entry and search through the "Run" and "RunServicesOnce" folders for odd or suspicious values. Browse to the "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion" and search through the "Run," "RunServicesOnce," "RunOnce" and "RunOnceEx" folders for odd or suspicious values. Delete any files that you are positive are spyware files from all of these directories. Research any file that you are unsure about. Deleting the wrong file in the registry can render Windows unbootable.


7 Exit out of the registry editor and reboot your computer in normal operating mode. Check for spyware by opening your browser and searching for toolbars that you did not add, changed homepage settings or pop ups. Hold down the "Control," "Shift" and "Escape" key and click on the Processes tab. Search for any spyware applications that you might have missed, running in the Windows background.


Tips & Warnings
Use spyware removal software in conjunction with manual spyware removal for the best result.


Be extremely careful when deleting files from your "C:" directory or registry. Deleting an essential file can cause Windows to be unbootable. It is advisable to back up your Windows registry before you make changes.

No comments:

Post a Comment