How to Remove Spyware From Windows

What Causes This?

Spyware usually gets onto a Windows PC through bundled software, fake browser extensions, malicious email attachments, cracked apps, or unsafe downloads. Its goal is to track what you do, collect data, inject ads, or change browser and system settings without clear permission. Some spyware also installs startup entries, scheduled tasks, or background processes so it keeps running after you restart your PC.

Common Symptoms

• Your browser homepage, search engine, or new tab page changes on its own
• Pop-ups, redirects, or extra ads appear even on normal websites
• The PC feels slower, especially when opening the browser or starting Windows
• Unknown apps, browser extensions, or background processes show up
• Antivirus warnings appear, or Windows Security reports suspicious activity

How to Fix It Manually

1. Disconnect from the internet if you suspect active spying

   • Turn off Wi-Fi from the taskbar or unplug Ethernet.
   • This can help stop spyware from sending data while you clean the system.

2. Boot into Safe Mode if the infection is persistent

   • Press Windows + I to open Settings.
   • Go to System > Recovery.
   • Under Advanced startup, click Restart now.
   • After restart, choose Troubleshoot > Advanced options > Startup Settings > Restart.
   • Press 4 for Safe Mode or 5 for Safe Mode with Networking.

3. Remove suspicious apps

   • Press Windows + I and open Apps > Installed apps.
   • Sort by Install date and look for anything you do not recognize, especially recently installed programs.
   • Click the three dots next to a suspicious app and choose Uninstall.
   • Avoid removing drivers or Microsoft components unless you are sure they are unwanted.

4. Check for suspicious startup items and running processes

   • Open Task Manager with Ctrl + Shift + Esc.
   • In the Processes tab, look for apps using unusual CPU, memory, or network activity with unfamiliar names.
   • Right-click suspicious items and choose Open file location to inspect where they are stored.
   • Go to the Startup apps tab and Disable anything suspicious or unnecessary.

5. Scan with Windows Security

   • Press Windows + I, then go to Privacy & security > Windows Security > Open Windows Security.
   • Select Virus & threat protection.
   • Click Scan options and run a Full scan.
   • If spyware keeps returning, run a Microsoft Defender Offline scan from the same menu. This checks for threats before Windows fully loads.

6. Clean your browser

   • In Chrome: open the three-dot menu > Extensions and remove anything suspicious. Then go to Settings > Reset settings > Restore settings to their original defaults.
   • In Edge: open Extensions and remove unknown add-ons. Then go to Settings > Reset settings > Restore settings to their default values.
   • Also check your default search engine and homepage settings and change them back if needed.

7. Check scheduled tasks and temporary files

   • Press Windows, type Task Scheduler, and open it.
   • Review Task Scheduler Library for tasks with random names or unknown publishers that run at logon or on a schedule.
   • Press Windows + R, type cleanmgr, and press Enter to run Disk Cleanup and remove temporary files that may contain leftover spyware components.

Fix It Automatically with Kudu

If you do not want to hunt through startup entries, scheduled tasks, browser traces, and leftover junk manually, Kudu can do the heavy lifting. It helps detect suspicious persistence points, remove unwanted traces, and clean up the system so Windows runs normally again. It is a faster, safer option when you are not sure what is safe to delete.

Download Kudu Free →