Getting Started

There are basically two steps involved in using Spybot effectively:

• Updating the Detection Rules and Immunization databases with the most recent and relevant updates from Spybot.

• Running Spybot. This involves immunising your system with the detection rules and immunisation databases or updates you have previously downloaded, then checking your system for spyware infestations and removing them.

Note: For a brief overview of key advanced options, please refer to section 3.0 Advanced Options.

2.1 How to Use Spybot for the First Time

After you have completed the installation and set-up process, Spybot will automatically launch itself and display the Legal stuff screen as follows:

Figure 1: The Legal stuff screen

Note: To launch Spybot the next time, either double-click the desktop icon or select Start: All Programs > Spybot - Search & Destroy > Spybot - Search & Destroy.

Step 1. Click the OK button to activate the Spybot Wizard and the Create registry backup screen as follows:

Figure 2: The Spybot-S&D Wizard Create registry backup screen

Note: You are strongly advised to create a backup of the registry. The Windows Registry is explained in the CCleaner guide, in the section called 'The Windows Registry' .

Step 2. Click:

Step 3. Click the Next button to activate the Spybot - Search for Updates screen.

Step 4. If you are connected to the Internet, click: and go to section 2.2 How to Update the Spybot Detection Rules and Immunization Databases. Otherwise, click the Next button.

Step 5. Click the Next button in the Immunize this system screen that appears, then click:

in the screen that follows.

You have now completed the initialisation process and Spybot automatically launches itself as follows:

Figure 3: The Spybot - Search & Destroy main screen

2.2 How to Update the Spybot Detection Rules and Immunization Databases

Important: It is absolutely vital that you keep Spybot up to date with the latest definitions.

Step 1. Click: in the left-hand menu bar.

Step 2. Click: when the Spybot - S&D Updater screen is active to begin updating Spybot with the latest detection rules and immunisation databases.

• If you have recently updated your detection rules, a pop-up screen appears, advising you that No newer updates are available.

• If you have not updated your detection rules, the Spybot-S&D Updater screen appears, listing a number of servers from which to download the updates as follows:

Figure 4: The Spybot-S&D Updater screen

Step 3. Select the location nearest to your country of residence, then right-click on it and choose Set this server as the preferred download location.

Step 4. Click the Continue button.

Figure 5: The Spybot-S&DUpdater screen displaying detection rules, help files and immunization databases

Step 5. Check all the options presented, then click: to begin downloading these updates.

Note: If an error occurs while downloading these updates, Spybot will offer you an opportunity to re-try it. After performing a successful download, you will be prompted to immunise your system and check for problems.

Step 6. Click: after the files have been downloaded successfully.

You will return to the Spybot - Search & Destroy main screen

Note: You can also run the Spybot update process at any time by Selecting: Start > All Programs > Spybot - Search & Destroy > Update Spybot -S&D.

2.3 How to Immunise Your System

Spybot helps shield your computer from known spyware by ‘immunising’ it. This is like receiving a vaccination against infectious new diseases.

To immunise your computer system, follow these steps:

Step 1. Click: in the Spybot-S&D sidebar to automatically begin the immunisation process and activate the following screen:

Figure 6: The Spybot - Search & Destroy screen with the immunisation process in progress

Note: You may need to maximise your window to view all options on this screen.

Step 2. Click: and wait until the program finishes the process.

Your system is now immunised against all known new threats.

Note: You can reverse or undo the immunisation process if you suspect that immunising your system has negatively affected the overall performance of your computer.

Step 3. Click: to reverse the immunisation process and restore your system to its previous state.

2.4 How to Check for Problems

Reminder: Before you begin checking for potential threats, please update the Spybot Detection rules and Immunization databases.

To check for problems and threats, follow these steps:

Step 1. Click:

Step 2. Click: to begin scanning your system for threats (if you have a lot of data, files, programmes etc. this could take 20 minutes to an hour).

Figure 7: The Spybot - S&D program checking for problems

After the scan has been completed, the number and kinds of problems will be listed in the pane as follows:

Figure 8: The Spybot - S&D screen displaying possible problems or threats

Step 3. Check only the items that you want to delete. Some of the found items may be marketing software that you would like to keep (for whatever reason).

Tip: Any item displayed in red lettering is generally treated as a problem or threat. Any item displayed in green lettering is keeping track of your Internet usage. To keep a particular item, un-check the check box associated with it, and it will not be deleted.

Important: Before you either delete or ignore the malware you have found, it is strongly recommended that you look up each item's behaviour and origins.

Step 4. Click: in the right-hand side of the Spybot results window to reveal more information about that item. If nothing is displayed, you can also research it on the Internet. Find out how it operates, and how it may compromise your system's integrity and security. Better knowledge and information about problems and threats leads to more privacy and security for you.

Figure 9: The Spybot - S&D Show more information pane

Step 5. Click: to activate malware deletion.

A confirmation dialogue box appears asking you if you would like to delete all the problems which have been found.

Step 6. Click the Yes button if you would like to delete them.

Note: It is generally a good idea to scan your system for problems every week.

2.5 Resident TeaTimer

The Resident TeaTimer is a Spybot program that is constantly running in the background (that is, even when you are not actively using Spybot). It constantly monitors important system processes to ensure that any possible threats are not changing critical system configurations or settings. TeaTimer alerts users whenever it detects a known malicious or suspicious process, and lets you either Allow or Deny that process (should it prove to be a malicious one). An example of such a pop-up screen appears as follows:

Figure 10: The Spybot - S&D Resident TeaTimer alert, displaying the Allow / Deny change screen

Given that many programmes (both necessary and malicious) require access to the system's internal processes, TeaTimer will frequently query you to Allow or Deny changes. In this example, Skype is being deleted from the Windows Start menu. This will usually happen when you have uninstalled a program (and this doesn't necessarily occur at startup time only). In this case, this is a valid request to change a small system setting and you can allow it.

Tip: If you are unsure about what you are being asked to do in a TeaTimer window, Click the Info button for more information.

Figure 11: The Spybot - S&D Resident information screen

It is safer to deny a request if you are not sure of its effects. However, if you are sure that the request is valid, check the Remember this decision box and Spybot will not display this alert again.

Note: You will often see the TeaTimer activated when you install a new program and it tries to add itself to the startup process. The same will happen when you uninstall a program.

Tip: It is strongly recommended that you update TeaTimer whenever an update is available.

2.6 How to Use the Recovery tool

The Recovery tool allows you to recover or retrieve any previously deleted or repaired item. This can happen because Spybot will create a backup for every item it has previously deleted. If a deleted piece of malware causes your computer to malfunction, it is possible to restore it using the Recovery tool.

To recover a previously deleted item, perform the following steps:

Step 1. Click: to activate the Recovery screen as follows:

Figure 12: The Spybot Search & Destroy - Recovery screen

Step 2. From the list of previously deleted items, check the items you would like to recover, then click:

A confirmation dialog box is activated as follows:

Figure 13: The Confirmation dialog box

Step 3. Click the Yes button to recover the selected items.

Step 4. Alternatively, click: to remove all checked files completely. However, be aware that purged items are not recoverable.