• Try it for free first and see what's in your computer.
• Select here to learn more about Spysweeper...
• Select here to download the free version of Spysweeper
• Select here to Buy the latest version of Spysweeper.

----  More Information  ----

SpyWare, MalWare and BHOs (Browser Helper Objects) are a fairly new (and, in my opinion, unwanted) development across the Internet. They are not exactly viruses, however they attempt to influence and monitor your computer activity in a similar fashion. They also attempt to install themselves in a questionable manner like piggybacking on another application, exploiting browser security holes or using confusing & annoying techniques to trick you into installing them. Additionally, they hide themselves in the system folders, hide their processes from the task manager and make themselves difficult to uninstall. These are all techniques learned from virus writers.

What differentiates these apps from a virus is that you usually, inadvertantly, agree to installing them on your machine. A freeware app may have a SpyWare piggybacking on it and when you agree to the user license, it gets installed. ActiveX controls are installed from web pages and you have to click OK to the security prompt, which also contains a license agreement. Some do actually install themselves using exploits and I think these might as well be called a virus. But a virus will usually try to spread to other people and cause damage. SpyWare doesn't generally *damage* your machine or mass-email itself out to all your contacts as would a virus. SpyWare/MalWare is generally geared towards marketing or generating revenue and not causing damage.

There are many things that these apps do, but the most common ones seem to be: monitoring your browsing, popping up ads, changing your home page, adding favorites and installing utility applications on your PC. SpyWare/MalWare usually claim to be "helpful" utilities. However, the authors are not really interested in helping you, rather, they get paid commissions for installing apps or displaying advertisements on your machine. The true purpose is to generate revenue for the author.

First line of Defense

The first thing to note is that you shouldn't rely on the programs listed below to protect you from yourself. The first line of defense is to be smart about applying critical updates and patches and not blindly clicking OK to alerts and messages. Spyware/Malware programs often require that you click Yes or OK to a prompt. They purposesly make these windows pop-up repeatedly, or claim that you must click OK to view a certain page. It's tempting to click OK to make the box just "go away." This is exactly what they are counting on, so don't be fooled by this technique. Usually clicking "Yes" indicates that you agree to the license terms and allows the installation. If you actually read the license, you'll be shocked that you are agreeing to basically give this unknown person full and total control over your computer and all information on it.

Prevention & Removal Techniques

There's three basic ways (and a fourth advanced method) to combat these types of programs and they're pretty much the same as anti-virus protection. 1. Locking down your system, 2. Running real-time monitors, and 3. Running periodic scan/remove utilities. Many people are familiar with Spyware/Malware scanners such as AdAware. This is a great product, however AdAware removes stuff after it has already made its way onto your machine. I like to use it to get rid of stuff, but I'd rather it never got there in the first place. So, here is my approach:

1. Lock down the system.

I like this first step particilarly because it doesn't require running any real-time monitoring software, which slows my machine down. There are many, many security settings that can be changed so that your system is more secure. These programs can all work together and I recommend installing all of them.

a) IE-SPYAD: (Freeware) This is a pretty clever way of dealing with the problem in that adds a list of known SpyWare/Malware websites to your IE "restricted sites" list. So, any traffic from them is blocked by IE. I like this because it requires no real-time monitoring and used the functionality already included in IE. The downside is that it provides no protection from unknown or new domain names. If you update it regularly, though, it will block all known content. Download IE-SPYAD from http://www.staff.uiuc.edu/~ehowes/resource.htm#IESPYAD

b) SpywareBlaster: (Free/Donation). This is one of the coolest apps because it blocks ActiveX controls from even running based on a database of CLSIDs (these are ID numbers that ActiveX controls use. It doesn't have to run in the background, it simply locks down the registry to prevent known SpyWare ActiveX controls from running or installing. Grab it at: http://www.javacoolsoftware.com

a) SpyBot Search & Destroy: (Free/Donation)   This really very good, is a mutli-function application, but it has an "imunize" section that locks down your PC. The "bad download blocker" is an ActiveX control / BHO (browser helper object) that monitors for content marked as Spyware/Malware. Get it at http://www.safer-networking.org/

2. Install real-time monitoring apps.

This provides great protection because, just like most anti-virus software, it monitors everything happening on your PC and prevents known Spyware/Malware from operating. The great protection comes with a trade-off, though. It requires system resources which can effect the performance of your machine. I recommend installing one (1) of these apps only.

a) AdWatch: (Commercial) This is the companion program to AdAware that comes with the Plus or Pro version. It's essentially an anti-virus TSR that monitors PC activity and blocks anything it thinks is bad. Fantastic protection, but again, you sacrifice some power when you run it. Obtained at http://www.lavasoft.de

b) McAfee Spyware Blocker (Commercial) Famous for their anti-virus software, McAfee has released an app specifically to deal with SpyWare/Malware. I haven't tried this one, but I use their anti-virus suite which I find to be good. http://us.mcafee.com/root/package.asp?pkgid=182

3. Run Scan/Removal utilities.

In case anything slipped by, the last resort is to scan for and remove it. This is great because it can use as much resources as necessary, you run it only when you want and they're pretty effective. However, the downside is that it only finds things you've already got! Better to never get them at all, but it can't always be prevented. I recommend installing at least one of these apps. If you're curious or really paranoid, install them all!

      a) SpyBot Search & Destroy: (Free /Donation)   This really very good, This has already been mentioned above as well. This is really a versatile app. Very similar to AdAware but seems to detect a few that AdAware misses. It also has some fantastic tools that let you view running processes and show the executable path, view your hosts file for alterations, etc. Some people say this is better than AdAware. Get it at http://www.safer-networking.org/

      b) SpyBot Search & Destroy: (Free /Donation) This has already been mentioned above as well. This is really a versatile app. Very similar to AdAware but seems to detect a few that AdAware misses. It also has some fantastic tools that let you view running processes and show the executable path, view your hosts file for alterations, etc. Some people say this is better than AdAware. Get it at http://www.safer-networking.org/

c) BHODemon BHODemon lists all Browser Helper Objects installed on your browser in a friendly interface and allows you to enable/disable them. Get it from http://www.definitivesolutions.com/bhodemon.htm

d) Ad-Aware SE Personnel : (Free). This is a tool for removing SpyWare that you should run with Spysweeper.  This is the Free version.  The free version is a fully functional version and it does a great job.  Ad-Aware SE Personnel,Download Site

      d) AdAware:  (Free). I have to mention this because it seems to be the defacto tool for removing SpyWare. The plus or professional versions are worth the price because they include AdWatch - the realtime monitoring component (see above). The free version only scans the system, but it does a great job.  Download Site

e) Hijack This: (Free).  This really very good.   This app is for the more advanced user. It analyzes your registry for settings that may have been changed by SpyWare. It doesn't really differentiate between normal settings and SpyWare, though, so you have to know what you want to delete and what to keep. However, many people use this tool simply to create a text version of their process list. This can be helpful when you're getting support online so that you can post all the running processes on your machine for fellow forum users to peruse. My problem with this app is that so many people are posting their Hijack This log, that it is hard to search the web for process executables and get any meaningful info anymore - all that comes up are HiJack This logs. Grab it at http://www.spywareinfo.com

4. Advanced Techniques.

These are some applications that can be used by advanced windows users to view operating system events, settings and technical information. If you're a casual windows user, these tools might be a little intimidating. However, it doesn't hurt to give them a try. These apps have a variety of purposes and I recommend installing them all.

a) Be Clean version 1.04: This application does a great job of cleaning Windows cache and temp file directories.  It also cleans the system registry file, temp internet files and removes bad files and links from left over uninstalled programs.  Can be set to run when Windows starts.  It is great in keeping your system running fast and smooth.

      b) Process Explorer: This application shows process information in much more detail than the windows task manager. It also shows paths to executables as well as information about loaded dlls, what files are in use by which processes. many spyware/malware programs will hide themselves from the regular task manager, but this program shows everything. grab it from http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

c) PortMon: Another Sysinternals utility - PortMon shows all processes that are listening or communicating on a port on your machine. Normal applications use ports to communicate back and forth locally, and across a network. This probably detects more virus and worm apps than sypware/malware. However, if something has installed a server process on your machine, it will most likely be listening for commands on a port. If this is the case, your machine may actually be vulnerable to hackers who seek to take control of your machine. Get PortMon from http://www.sysinternals.com/ntw2k/freeware/portmon.shtml

d) PIAFCTM PIAFCTM is a network activity monitor (commonly known as a Packet Sniffer). This utility shows all incoming and outgoing packets over the TCP/IP stack. When you send emails, visit a web page, request a network file, etc, all the data is sent in packets. When you're not doing anything, there shouldn't be much activity, accept for automated things such as anti-virus auto-updates, etc. If you notice unknown applications sending packets, someone might be transmitting data to/from your machine. Download it from http://www.networkactiv.com/PIAFCTM.html

These are some applications that can be used by advanced windows users to view operating system events, settings and technical information. If you're a casual windows user, these tools might be a little intimidating. However, it doesn't hurt to give them a try. These apps have a variety of purposes and I recommend installing them all.

BEST!!! Combination Anti-Virus and Firewall program   | Recommended Download Programs  |  Spam Help

Recommended Programs  |   What is it   |  Prevention and Removal  |  Run Scan/Removal utilities   |  Advanced Help