How to use the Spybot Search & Destroy program to remove spyware.

-Click Here for a PDF of this document.

Spybot Search and Destroy (or Spybot SD as it is called) is a powerful and fairly easy-to-use program for removing spyware/adware/malware from an infected PC. This program combined with Ad-aware give you the proverbial "one-two" punch to knockout most of the malicious spyware on your computer.

Spybot SD also includes the function to "Immunize" your computer which helps prevent the further download of known spyware onto your Windows PC.

What you need to do:

Download the program.

You can visit the Spybot SD download page here. Follow the instructions they give to download the Spybot Search & Destroy program Be sure to save the installer file somewhere you can find it later, such as My Documents or the Desktop.

Install the program.

Simply browse to the installer program you downloaded (it should be named something like spybotsd13.exe) and double-click on it. This should begin the installation process. Follow the step-by-step instructions they give and you should be fully installed in no time.

As you install Spybot SD you should be presented with a screen like this:

It's up to you whether you want to create desktop icons, but we do recommend leaving a check in "Use Internet Explorer Protection". Click the "Next" button to continue the install.

Once installed, Spybot SD will present you with the following screen:

Some programs (some versions of Kazaa for example) you download routinely contain spyware that is bundled with the software. Often removing the attached spyware will cause the program to cease functioning. Spybot SD is simply warning you about it. It's up to you whether to check the box asking to show you the warning every time Spybot SD starts.

You may also be presented by this screen:

The screen labeled "Compatibility warnings" Only shows up if you have other spyware removing software installed (such as Ad-aware). This screen is letting you know how those programs might interact with Spybot SD and what to look for. It is important that you read and understand these warnings. Again, it is up to you to decide whether to allow the message to display every time Spybot SD starts.

The screen in the upper left labeled "Spybot S&D Wizard" will show the first time you run Spybot SD. Also seen below:

You may create a backup of your system registry if you like. Otherwise, simply click the "Next" button. You will then see this window:

Click the "searh for updates" button. You will need to be connected to the internet in order to get any updates. Once it is done you will see the next screen:

Simply click the "Download all available updates" to ensure Spybot SD is updated. Then click the "Next" button. Will be presented with this:

Immunizing will activate the feature in Spybot SD that will help prevent known spyware programs from being installed onto your computer. It is recommended that you click the "Immunize this system" button, and then click the "Next" button once it is done 'immunizing'

Spybot will now dow you this screen:

We recommend you read through the tutorial and the help file at your leisure. They will help your understanding of the program greatly.

You may also simply click the "Start using the program" button. Which will finally start the program itself.

Run the program.

The main Spybot SD screen. The image blow shows the main screen of the Spybot SD program.

 

Scanning your computer.

Click the "check for problems" button on the main screen, this should take you to a screen that looks like this:

If a scan does not automatically start, click the "Check for problems" button on this new screen.

During a scan you will see a screen like this:

Notice the items in red. These are all files/registry keys/cookies etc that Spybot SD associates as spyware. The green bar at the bottom of the scree will display the progress of the scan.

When the scan is complete, the program should look something like this:

This displays the list of evertything Spybot SD found during its scan. You can now examine them and decide which objects to keep and which to remove. Unless you have spefic needs to keep any of these malicious objects, you're best off deleting all of them. Simpy leave the checkboxes engaged and click the "Fix selected problems" button at the top of the screen. Spybot SD will then attempt to remove all the problems it has found. Once that has happened your screen should look like this:

Occasionally, Spybot SD will find an object that it can't remove right away. It will prompt you and ask if you would like Spybot SD to run during your next start-up of your machine so it can try to intercept the bad programs before they start. We suggest you do so and restart your computer at your nearest convenience to do so.

That's all there is to it. Spybot SD has safely removed much of the Spyware/Adware/Malware from your computer. It is highly recomended that you update and run Spybot SD at least once a week.

If you have any questions about Spybot SD, feel free to check out the built-in help file, visit their web-site (at http://www.safer-networking.org/en/download/index.html) or ask the WITS Help Desk (x6767, wits@willamette.edu).

Back to the Spyware page.