How to Get Rid of Spyware, Adware, and Unwanted Programs

FILExt is a site about file extensions and the programs that use them. Sometimes people arrive here after clicking an unfamiliar file type, a strange shortcut, or a pop-up that was created by adware, spyware, or another unwanted program. FILExt did not install that software and cannot remove it for you, but the steps below can help you clean up your computer safely.

Security vendors usually call these threats spyware, adware, browser hijackers, potentially unwanted programs (PUPs), or potentially unwanted applications (PUAs). Avoid using UWP as a malware category, because in Windows it usually means Universal Windows Platform, which is not the same thing.

Common Signs of Spyware, Adware, or Unwanted Software

• Your browser homepage, search engine, or new-tab page changed without permission.
• You see pop-ups, fake virus warnings, coupon boxes, or browser notifications from sites you do not recognize.
• Unknown browser extensions, toolbars, VPNs, “PC cleaners,” “driver updaters,” or shopping assistants appeared.
• Windows starts slowly, your fan runs constantly, or unknown programs appear in Task Manager.
• Your antivirus reports a PUA, PUP, Trojan, browser hijacker, or suspicious startup item.
• You are redirected to unfamiliar search pages or tech-support phone numbers.

Before You Start

• Do not call phone numbers shown in pop-ups. Fake Microsoft, Apple, antivirus, and bank alerts are common scams.
• Do not install more “fixer” apps from ads. Many fake cleaners create more problems.
• Back up important personal files such as documents, photos, and tax files. Do not back up suspicious installers, cracks, unknown ZIP files, or pirated software.
• Save your work and close browsers before running cleanup tools. Some scans require a restart.
• Use official download pages only. Avoid download portals, sponsored search results, and “mirror” sites for security tools.

Step 1: Update Windows and Built-In Protection

1. Open Settings > Windows Update and install all available updates.
2. Open Windows Security > Virus & threat protection.
3. Make sure Microsoft Defender Antivirus is enabled, unless you intentionally use another reputable antivirus product.
4. Open App & browser control > Reputation-based protection settings and turn on Potentially unwanted app blocking for apps and downloads.

Microsoft’s current security help pages are here:

• Windows Security app
• Protect your PC from potentially unwanted applications
• Virus & threat protection in Windows Security

Step 2: Uninstall Suspicious Programs

1. Open Settings > Apps > Installed apps.
2. Sort by Date installed if available.
3. Look for programs you do not recognize, especially recently installed “search,” “coupon,” “PDF,” “video,” “VPN,” “driver updater,” “system optimizer,” “PC cleaner,” or “browser assistant” tools.
4. Select the unwanted app and choose Uninstall.
5. Restart the computer after removing suspicious software.

Microsoft’s official uninstall instructions are here: Uninstall or remove apps and programs in Windows.

Step 3: Remove Unwanted Browser Extensions and Notifications

Google Chrome and Microsoft Edge

1. Open the browser menu and go to Extensions.
2. Remove anything you did not install or no longer trust.
3. Open Settings and check your search engine, homepage, startup pages, and site notification permissions.
4. If the browser is still hijacked, reset the browser settings.

Chrome users should use Google’s guide: Remove unwanted ads, pop-ups & malware.

Mozilla Firefox

1. Open Add-ons and themes.
2. Remove unknown extensions and themes.
3. Use Troubleshoot Mode to test whether an extension is causing the problem.
4. If needed, refresh Firefox to reset add-ons and settings.

Firefox users should use Mozilla’s guide: Refresh Firefox - reset add-ons and settings.

Safari on Mac

For Mac users, check Safari extensions, pop-up settings, and fraudulent website warnings. Apple’s guide is here: Block pop-up ads and windows in Safari.

Step 4: Run a Full Malware Scan

1. Open Windows Security.
2. Select Virus & threat protection.
3. Select Scan options.
4. Run a Full scan.
5. Remove or quarantine detected threats.
6. Restart the computer and run another scan if Windows Security asks you to.

If the infection keeps coming back, run Microsoft Defender Offline scan. It restarts the PC and scans before normal Windows loads, which can help with persistent malware.

Official Microsoft pages:

• Microsoft Defender Offline
• Troubleshoot problems with detecting and removing malware

Step 5: Use a Second-Opinion Scanner

One antivirus scan is not always enough. These tools are useful for checking adware, browser hijackers, and stubborn unwanted programs:

• Malwarebytes AdwCleaner — focused on adware, browser hijackers, unwanted toolbars, and potentially unwanted programs on Windows PCs.
• Microsoft Safety Scanner — Microsoft’s on-demand malware scanner for Windows computers.

Download these tools only from their official websites. After scanning, review detections before deleting anything. When in doubt, quarantine instead of permanently deleting.

Step 6: Check What Starts With Windows

Unwanted programs often return because a startup item, scheduled task, browser helper, or background process loads every time Windows starts.

1. Press Ctrl + Shift + Esc to open Task Manager.
2. Open Startup apps.
3. Disable startup entries you do not recognize or no longer need.
4. Restart and check whether the pop-ups or redirects return.

Microsoft’s startup guide is here: Configure startup applications in Windows.

Step 7: Inspect Suspicious Processes

For users who want a clearer view of what is running, Security Task Manager by Neuber can help identify risky, hidden, or unnecessary Windows processes and explain why a process may be suspicious. It is useful for investigation, especially when Task Manager shows unfamiliar background activity.

Security Task Manager is not a replacement for antivirus or antimalware cleanup. Use it to inspect processes, file paths, publishers, and risk indicators, then confirm suspicious items with a reputable scanner before removing anything important.

Advanced users can also use Microsoft Sysinternals tools:

• Process Explorer — shows detailed information about running processes, handles, and loaded DLLs.
• Autoruns — shows many auto-start locations, including services, scheduled tasks, shell extensions, browser helpers, and registry startup entries.

Do not delete system entries just because you do not recognize them. Search the file name, publisher, and file path first.

Step 8: Fix Fake Alerts and Notification Spam

Many “virus alerts” are not installed malware. They are browser notifications from a website you accidentally allowed.

1. Do not click the alert.
2. Do not call the phone number.
3. Open your browser’s site settings.
4. Remove notification permissions for unknown sites.
5. Clear suspicious pop-up and redirect permissions.
6. Run a full scan afterward if the alerts continue.

Microsoft’s tech-support scam guidance is here: Protect yourself from tech support scams.

Step 9: Change Passwords After the Computer Is Clean

If you found spyware, a password stealer, a remote-access tool, or anything that may have monitored your activity, change passwords after cleaning the device. Start with email, banking, Microsoft, Apple, Google, password manager, and shopping accounts.

• Use a clean device if you suspect the infected computer watched your keystrokes.
• Use strong, unique passwords for important accounts.
• Turn on multi-factor authentication where available.
• Check account recovery email addresses and phone numbers.
• Review recent sign-ins and connected devices.

The FTC’s consumer malware guidance is here: Protect Your Computer from Malware.

Step 10: When to Reset or Reinstall Windows

Consider resetting Windows or asking a professional for help if:

• Scans repeatedly find the same threat after removal.
• You cannot open security tools or Windows Update.
• Unknown remote-access software was installed.
• Your financial accounts, email, or password manager may have been accessed.
• The computer is unstable after cleanup.

Before resetting, back up personal files only. Do not restore old program folders or suspicious installers. After reinstalling or resetting Windows, install updates first, then restore files, then reinstall software only from official sources.

Recommended Help Sites

• Microsoft Security Help
• Microsoft Community
• BleepingComputer Malware Removal Help Forum
• Apple Support
• Android Help

How to Avoid Getting Infected Again

• Keep Windows, browsers, and apps updated.
• Download software from official vendor websites or trusted app stores.
• Be careful with free installers that bundle extra offers.
• Do not install pirated software, cracks, keygens, or “activators.”
• Read installer screens before clicking Next.
• Keep browser extensions to a minimum.
• Block browser notifications from sites that do not need them.
• Use standard user accounts for daily work when practical.
• Keep offline or cloud backups of important files.

Bottom line: Start with Windows Security, remove suspicious apps and extensions, reset browser settings when needed, run a full scan, then use a second-opinion tool such as Malwarebytes AdwCleaner or Microsoft Safety Scanner. If the problem persists, inspect startup items and processes with tools such as Security Task Manager or Microsoft Sysinternals Autoruns, or get help from a reputable support forum.