The main strategy of Spyware blocker is three way: firstly detection, second is removal and signature generation, third is real time and run time protection. The Windows anti-Spyware in such case match the pattern of event generated and the results their off in labs and set the parameters. These parameters are included in newer versions of anti-Spyware or sent as updates to previous subscribers. With this the registries and system files are constantly made to be in safe conditions. Windows anti Spyware recognizes such auto events and user-generated events.