How do you get rid of Search2020 Spyware

[Harry]

I've picked up some spyware I can't get rid of. Almost every time I do a search for something on Google, I am redirected to a list of search engines like seach2020. I have spent 5 hours now running 5 different spyware killers and not one of them is getting rid of it.

I have also run hijackthis and got the following results but don't know what to delete:

Logfile of HijackThis v1.94.0
Scan saved at 11:04:15 AM, on 5/1/2004
Platform: Windows 2000 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 (5.00.2920.0000)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINNT\System32\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=%SystemRoot%\system32\blank.htm

O1 - Hosts: 216.239.37.101 www.download-doctor.com
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - f:\program files\utilities\acro51full\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [MSConfig] C:\WINNT\System32\msconfig.exe /auto
O5 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O6 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O7 - DPF: {3E13AA37-352F-4E5F-91C4-08A0BA0C9541} (InSPECS2_0 Control) - http://161.58.155.13/cab_files/InSPECS2_0.cab

[ghost2003]

What antispyware programs did you use?
Could you post a full log?

[charlie1]

I too also have this problem when searching with google, so it would be nice to see what the problem is.
I use adware, spybot, and spywareblaster but its stilll there.

[Lobos]

we need your whole log
it sounds like you got hit by a cws varient

Go to http://www.spywareinfo.com/~merijn/c...ml#cwshredder, and download the latest version of CWShredder by Merijn Bellekom, the creator of Hijack This.
Run it, press 'Fix', and allow it to fix all it finds.
And remember to click "Fix" (Not "Scan only")

then

Download AdAware 6 181 from here: http://www.lavasoftusa.com/
Before you scan with AdAware, check for updates of the reference file by using the "webupdate".
Then ........

Make sure the following settings are made and on -------"ON=GREEN"
From main window :Click "Start" then " Activate in-depth scan"

Then......

Click "Use custom scanning options>Customize" and have these options on: "Scan within archives" ,"Scan active processes","Scan registry", "Deep scan registry" ,"Scan my IE Favorites for banned URL" and "Scan my host-files"

Then.........

Go to settings(the gear on top of AdAware)>Tweak>Scanning engine and tick "Unload recognized processes during scanning" and "Let windows remove files in use at next reboot"

Then...... click "proceed" to save your settings.

Now to scan it´s just to click the "Scan" button.

When scan is finished mark everything for removal and get rid of it.(Right-click the window and choose"select all" from the drop down menu)


Then
Download Spybot - Search & Destroy from http://security.kolla.de

After installing, first press Online, and search for, put a check mark at, and install all updates.
Next, close all Internet Explorer and OE windows, hit 'Check for Problems', and have SpyBot remove all it finds that is marked in RED

Also try spyware guard and spyware blaster www.javacoolsoftware.com
spyware blaster will block spyware from comming in when you surf the net(compatible with IE, mozilla and firefox) and spyware guard is a resident scaner.

then run hjt again and please post your whole log

[ghost2003]

Why scan in archives? That will only bring problems with spybot becaus of its recovery feature.

[Lobos]

alot of security specialists in the other forums that run these two programs all the time these are the settings that they recommend and have

[Harry]

Lobos,

Very good. You hit it right on the mark. I used spybot, adaware, spy sweeper, spywareblaster and non of them fixed it because these programs I found out do not fix hijacked browsers. I used CWshredder but did not use the current version. When I upgraded to the current version it found CoolWebSearch and destroyed it and my problem was gone and my browser once again loaded web sites a lot faster instead of being redirected. Perhaps this discovery can help Charlie1 fix his problem.

[charlie1]

Yeah thanks Lobos, I will sort the problem out right away.