There are many ways for spyware to get into your computer.
No single anti-spyware program removes all spyware. It is virtually impossible to remove some spyware. The best spyware defense is to keep the parasites off your PC in the first place. ;-) For that, you need a multi-layer approach.
This is the single most important defense you have against spyware. Most spyware needs the cooperation of a trusting victim to get installed. Be very wary when unexpected offers or warnings pop up, either in a webpage or in a "spam" message.
Those offers are designed to take advantage of human nature. Usually there's attractive bait or a notice of a (asserted) problem with one of your accounts or your computer. Anything to persuade you to click on the link.
Even if a unexpected warning or offer *looks* perfectly legitimate, don't believe it. If you're curious, check it out by searching online using the name of the software. Try these searches for "Spyaxe", Spyban and WhenUSave, and see what you get.
Some popups are booby trapped. If you click "Cancel", or even the "X" button to close the popup, it will install spyware anyway. Try "Ctrl+W" (hold down the Ctrl key and press "w") to close the notice. If that doesn't work it's better to leave the popup open and restart your computer than to have it infested with spyware.
Warning: Be on your guard against bogus anti-spyware programs.
Internet Explorer is the biggest hole of them all. Get yourself a different browser to plug this one.
The first thing you can do is install SP2 for Windows XP. It adds some good early-warning protection. That is, if you actually pay attention to the warnings that will pop-up. Don't let your normal reaction to pop-ups make you click "OK" too quickly.
Any program that has access to the Internet might let spyware in. Windows, Internet Explorer and Outlook Express have many security holes. Sadly, some of those were totally unnecessary. Similar holes have been discovered in many other programs.
There are two things you can do to plug holes in software. Both of them are handled in specific steps of the 7-Step Plan for Online Security. They're included here to complete the picture.PestPatrol's "Center for Pest Research" [news] is a great place to check a program to see if it's malware. Start at their home page and look for "Search 21,109 pest descriptions" (the # will be larger). You can search or browse at the page that opens. Check the program to see if it carries spyware or other malware.
SpywareGuide and Kephyr are two other places where you can check out programs to see if they carry spyware.
Don't rely on just a firewall or anti-virus program to block spyware. Someday they may, but none of them do a good enough job on spyware. You need special software to find spyware and root it out. [Go to Step 4]
Don't use public PCs like the ones in Internet Cafes or Public Libraries to do business online. Many of these public machines have surveillance software, like keyloggers installed. Guess where your information goes -- right to fraudsters who know how to use it to clone your identity for their own use. [more]