Title: 2020Search

Type: Browser Plugins

Remove 2020Search. Removal instructions

Severity scale:

(50 / 100)

2020Search is a malicious Internet Explorer toolbar that changes default web search settings and redirects a web browser to certain sites. The parasite sends computer's Internet address and operating system details to its home servers. It also silently downloads and installs a spyware parasite without asking for user permission. 2020Search must be manually installed or can get into the system along with some ad-supported software. It runs every time the user opens Internet Explorer.

Related files: 2020setup.exe, srng.exe, svchost.exe, 2020search.dll, 2020search2.dll

2020Search properties:
• Changes browser settings
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic 2020Search removal:

remover for 2020Search

SpyHunter is recommended remover to uninstall 2020Search. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove 2020Search using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing 2020Search (2005-11-17 11:31:09)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing 2020Search (2005-11-17 11:31:09)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing 2020Search (2005-11-17 11:31:09)

XoftSpySE Anti Spyware

download | review

2020Search manual removal:

FORUM:
Discuss 2020Search in
spyware removal forum

Kill processes:
2020setup.exe, srng.exe, svchost.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Srng
HKEY_CURRENT_USER\Software\2020Search
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&RSDN Search
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\(default)={4E1075F4-EEC4-4a86-ADD7-CD5F52858C31}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\(default)={4E1075F4-EEC4-4a86-ADD7-CD5F52858C31}
HKEY_CLASSES_ROOT\Downloader.Downloader
HKEY_CLASSES_ROOT\Downloader.Downloader.1
HKEY_CLASSES_ROOT\GoRSDN.ContextItem
HKEY_CLASSES_ROOT\GoRSDN.ContextItem.1
HKEY_CLASSES_ROOT\Pugi.PugiObj
HKEY_CLASSES_ROOT\Pugi.PugiObj.1
HKEY_CLASSES_ROOT\CLSID\{4E1075F4-EEC4-4a86-ADD7-CD5F52858C31}
HKEY_CLASSES_ROOT\CLSID\{FC2493D6-A673-49FE-A2EE-EFE03E95C27C}
HKEY_CLASSES_ROOT\CLSID\{FC3A74E5-F281-4F10-AE1E-733078684F3C}
HKEY_CLASSES_ROOT\Interface\{02CB16D1-4CA7-47FF-8546-C5E925DF33D6}
HKEY_CLASSES_ROOT\Interface\{7B9A715E-9D87-4C21-BF9E-F914F2FA953F}
HKEY_CLASSES_ROOT\Interface\{EAF2CCEE-21A1-4203-9F36-4929FD104D43}
HKEY_CLASSES_ROOT\TypeLib\{6D3F5DE4-E980-4407-A10F-9AC771ABAAE6}
HKEY_CLASSES_ROOT\TypeLib\{E306B3C1-3C68-4EFA-9EBC-0B99C6A918C2}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\2020Search2020Search

HELP:
how to remove registry entries

Unregister DLLs:
2020search2.dll, 2020search.dll

HELP:
how to unregister malicious DLLs

Delete files:
2020setup.exe, srng.exe, svchost.exe, 2020search.dll, 2020search2.dll

HELP:
how to remove harmful files

Delete directories:
C:Program FilesSrng
C:Program FilesDynamic Toolbar

Information added: 2004-03-19 10:00:00
Information updated: 2005-11-17 08:53:54

Additional resources related to 2020Search:

Attention: If you know or you have a website or page about 2020Search removal, feel free to add a link to this list: add url

more resources

John

There is a relationship between 2020 search and CoolWebSearch parasite.

Reply »

2004 04 03

Guest

2020 Search is not a useful tool. Its also very hard to uninstall

Reply »

2004 04 06

Guest

how does one get the 2020 search? i'm wondering if it comes with the google toolbar I installed. Is that possible?

Reply »

2004 04 22

Guest

does n e one know if 2020 search is related to browservillage?

Reply »

2004 04 26

sammie

did all that and still infected. I hope these people are infected with something they cannot get rid of!!!!

Reply »

2004 05 26

Quid

I've had the google bar for well over 6 months with no problem until today, it's not related to the google bar. I ran CWShrdder earlier, a file to eliminate CoolWebSearch, it's still here. Hopefully this page will work

Reply »

2004 06 04

rose

run regedit and search for 2020search. delete keys and packages associated with it. Be very careful - deleting the incorrect keys could destroy your system as you are editing the system registry. Next, delete the files associated with 2020search using the file explorer.

Reply »

2004 06 06

DotMunson

In my drop/add also known as Search 2020. I can't locate any listed files to rid. I downloaded the 3 apps and still have trouble but is getting better each time I reboot. I have had 2 crashes since I downloaded spyhunter,firewall, popupblocker. Grrrrrrrr!

Reply »

2004 06 27

DotMunson

found additional registry value not listed above in manual removal: In registry:
HKEY_CURRENT_USERSoftwareDynamic Toobar
In my entry is have 2020 search related files.

Reply »

2004 06 27

guywithatip

Tried for 3 hours to get rid of it finally got a solution here>>>

Manual Uninstall

1. Close Internet Explorer
2. Click Start
3. Click Run
4. type "regsvr32 systb.dll /u" (without the ")
5. Press "enter" OR "return"
6. type "regsvr32 winobject.dll /u" (without the ")
7. Press "enter" OR "return"
8. Type "msconfig" (without the ", msconfig is usually located in your windows/system directory)
9. Click on "Start Up"
10. "untick" Win Server
11. "untick" Win Server Updt
12. Restart your computer
== once computer restarted ==
13. Click Start
14. Click Search
15. Click For Files or Folders
16. Search for "systb.dll" (without the ")
17. Click on systb.dll on your right once it's found
18. Right mouse click and click on delete
19. Search for "winserv.exe" (without the ")
20. Click on winserv.exe on your right once it's found
21. Right mouse click and click on delete
22. Search for "wupdt.exe" (without the ")
20. Click on wupdt.exe on your right once it's found
21. Right mouse click and click on delete
20. Search for "winobject.dll" (without the ")
21. Click on winobject.dll on your right once it's found
22. Right mouse click and click on delete

Reply »

2004 07 16

chris

The stupid thing also hijacks google,ask jeeves and MSN searches; but i dont think it is related to the google toolbar.

Reply »

2004 07 26

Guest

I see this parasite occasionally. You can have as many technical solutions as you like, these people will find ways around it. It is only a matter of time before such things get get criminally pursued. When this happens, everone should have his writs ready for compensation claims against the company. Make sure everything, including the time spent for removal is properly documented - if necessary with witnesses.

Reply »

2004 09 27

Guest

best way to get rid of spyware is to use gateway goback. once you see that you have been infected just use gateway goback to goback to the time when you didnt have the spyware

Reply »

2005 03 21

Post Comment:

Attention: Use this form only if you have additional information about 2020Search parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.