Get rid of 2Search and stdrun6.exe

Be prepared to find your problem with 2Search disappeared and recover stdrun6.exe just now!

You can write a message to our support team with the form below. Try to describe your problem in brief and specifically. Thanks to your well-done description our support team will answer all your questions and propose a suitable solution just in several minutes after we receive your enquiry. If you describe your problem with 2Search completely enough our assistants will give you a step-by-step recommendation on how to solve it.

Ask your question below and we'll answer you in 10 minutes or even less. Don't forget to check your mailbox!

* Name: * E-mail: * Problem summary: * Detailed problem description: Attach suspicious file: Here you can attach file you suspect to be virus or source of problem. If you want to attach several files, put them into one archive and attach it instead.

We'll contact you in 10 minutes or less after you click on this button! Individual solution guaranteed!

Notification:

1) Spam is the such annoying thing for us as it is for you. We won't use your email in any ways besides supporting you to solve 2Search problems or anything assosiated with them. We'll close your email for any third party and ban off-site access.
2) You should fill all fields in this form for succesful support.

Problem solving service is provided by Security Stronghold company which is member of «Software Industry Professionals». Give us your problem and get back for your solution!

Effective solution is guaranteed

Specification and description of 2Search and ways to repair stdrun6.exe file

Solve the problem manually

Get free of a problem by downloading automatical solution

Ask a question about 2Search and stdrun6.exe error

Threat's dossier

	Name of the threat: 2Search
	Command or file name: stdrun6.exe
	Threat type: Spyware
	Affected OS: Win32 (Windows 9x, Windows XP, Windows Vista)

Ways for invasion

The ingressed threat makes its copy on your computer and launches 2Search system process using the names similar to stdrun6.exe or 2Search. It initiates a creation of new startup key under the name 2Search and value stdrun6.exe.

If you need more information about stdrun6.exe you should contact to us with the form above.

» Fix stdrun6.exe with FREE Removal Tool

Recommended Solution

You may use our quick and easy solution which we developed specially to solve 2Search and many other malicious programs. 3 027 698 malicious programs will be destroyed with the help of Removal Tool. You will forget what are worms, trojans, adware, spyware/trojans, badware/spyware, dialers, hijackers, rats, spyware/adware, viruses, parasites, keyloggers, downloaders and other types of malicious programs. Removal Tool ensures your security and trouble-free work at any time. As a rule anti-virus software can't cope with some malicious programs and you are lost unprotected. On contrary, tool will destroy adware, spyware, rats and viruses easily and quickly. Thanks to this program you are sure for your privacy. All malware becomes harmless when True Sword is installed.

» True Sword Free Download

Manual solution of 2Search problem

In order to make progress in getting rid of stdrun6.exe manually you should delete all files assosiated with 2Search infection, including destruction of its registry keys and invalid DLLs. It is also recommended to delete files with names similar to 2Search from startup list. Sometimes 2Search can corrupt DLLs that can become a cause of unstability of your Windows. You will have to recover it from distribution to make it work correctly.To get rid of this threat, be assured to follow next points:

1. Destroy the malicious process and all associated files:

no information

Notification: Be careful while deleting anything from system files. This is dangerous to destroy a valid process that can carry result in Windows disfunction. It is a cute trick of malware to hide behind valid files and use some names similar to the ones DLLs use. To escape unpredictable results we suggest you to use Removal Tool to ensure your system.

2. Destroy all assosiated malware:

• %programfiles%\bho\
• %programfiles%\2search\

3. Clean up all infected registry keys and\or values:

• Key: TypeLib\{20048BB0-DB68-11CF-9CAF-00AA006CB425}\1.0
• Key: TypeLib\{20048BB0-DB68-11CF-9CAF-00AA006CB425}\1.0\FLAGS
• Key: TypeLib\{20048BB0-DB68-11CF-9CAF-00AA006CB425}\1.0\0\win32
• Key: TypeLib\{20048BB0-DB68-11CF-9CAF-00AA006CB425}\1.0\HELPDIR
• Key: Interface\{20048BB1-DB68-11CF-9CAF-00AA006CB425}
• Key: Interface\{20048BB1-DB68-11CF-9CAF-00AA006CB425}\ProxyStubClsid
• Key: Interface\{20048BB1-DB68-11CF-9CAF-00AA006CB425}\ProxyStubClsid32
• Key: Interface\{20048BB1-DB68-11CF-9CAF-00AA006CB425}\TypeLib
  Value: Version
• Key: Interface\{20048BB2-DB68-11CF-9CAF-00AA006CB425}
• Key: Interface\{20048BB2-DB68-11CF-9CAF-00AA006CB425}\ProxyStubClsid
• Key: Interface\{20048BB2-DB68-11CF-9CAF-00AA006CB425}\ProxyStubClsid32
• Key: Interface\{20048BB2-DB68-11CF-9CAF-00AA006CB425}\TypeLib
  Value: Version
• Key: CLSID\{20048BB4-DB68-11CF-9CAF-00AA006CB425}
• Key: CLSID\{20048BB4-DB68-11CF-9CAF-00AA006CB425}\InprocServer32
• Key: STOPLITE.StopLiteCtrl.1
• Key: STOPLITE.StopLiteCtrl.1\CLSID
• Key: CLSID\{20048BB3-DB68-11CF-9CAF-00AA006CB425}
• Key: CLSID\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\ProgID
• Key: CLSID\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\InprocServer32
  Value: ThreadingModel
• Key: CLSID\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\ToolboxBitmap32
• Key: CLSID\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\MiscStatus
• Key: CLSID\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\MiscStatus\1
• Key: CLSID\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\Control
• Key: CLSID\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\TypeLib
• Key: CLSID\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\Version
• Key: CLSID\{9125F250-EB4F-49fe-AE17-C17665873A5C}
• Key: CLSID\{9125F250-EB4F-49fe-AE17-C17665873A5C}\InProcServer32
  Value: ThreadingModel
• Key: Software\Microsoft\Code Store Database\Distribution Units\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\InstalledVersion
  Value: LastModified
• Key: TypeLib\{4508E20A-ACAD-11D2-9FC0-00550076E06F}\2.1
• Key: TypeLib\{4508E20A-ACAD-11D2-9FC0-00550076E06F}\2.1\FLAGS
• Key: TypeLib\{4508E20A-ACAD-11D2-9FC0-00550076E06F}\2.1\0\win32
• Key: TypeLib\{4508E20A-ACAD-11D2-9FC0-00550076E06F}\2.1\HELPDIR
• Key: Interface\{F79A1360-2754-43F3-8297-8A39408BE2BF}
• Key: Interface\{F79A1360-2754-43F3-8297-8A39408BE2BF}\ProxyStubClsid
• Key: Interface\{F79A1360-2754-43F3-8297-8A39408BE2BF}\ProxyStubClsid32
• Key: Interface\{F79A1360-2754-43F3-8297-8A39408BE2BF}\TypeLib
  Value: Version
• Key: CLSID\{4508E20C-ACAD-11D2-9FC0-00550076E06F}
• Key: CLSID\{4508E20C-ACAD-11D2-9FC0-00550076E06F}\ProgID
• Key: CLSID\{4508E20C-ACAD-11D2-9FC0-00550076E06F}\InprocServer32
  Value: ThreadingModel
• Key: CLSID\{4508E20C-ACAD-11D2-9FC0-00550076E06F}\TypeLib
• Key: CLSID\{4508E20C-ACAD-11D2-9FC0-00550076E06F}\VERSION
• Key: GoogleCatch.clsIESpy
• Key: GoogleCatch.clsIESpy\Clsid
• Key: Interface\{9C33138E-0581-4C28-A943-BC238A68208C}
• Key: Interface\{9C33138E-0581-4C28-A943-BC238A68208C}\ProxyStubClsid
• Key: Interface\{9C33138E-0581-4C28-A943-BC238A68208C}\ProxyStubClsid32
• Key: Interface\{9C33138E-0581-4C28-A943-BC238A68208C}\Forward
• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4508E20C-ACAD-11D2-9FC0-00550076E06F}
• Key: CLSID\{F41E9234-774D-407d-B8C8-7E6C16FE108B}
• Key: CLSID\{F41E9234-774D-407d-B8C8-7E6C16FE108B}\InProcServer32
  Value: ThreadingModel
• Key: Software\Microsoft\Code Store Database\Distribution Units\{20048BB3-DB68-11CF-9CAF-00AA006CB425}
  Value: SystemComponent
• Key: Software\Microsoft\Code Store Database\Distribution Units\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\Contains
• Key: Software\Microsoft\Code Store Database\Distribution Units\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\Contains\Files
  Value: %windows%\Downloaded Program Files\access.ocx
• Key: Software\Microsoft\Code Store Database\Distribution Units\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\DownloadInformation
  Value: CODEBASE
• Key: SOFTWARE\BHO
  Value: ModId
• Key: Software\BHO\files
  Value: plugin.dll
• Key: CLSID\{9BB5B49C-0D59-418d-A6A5-F6373B8FEF64}
• Key: CLSID\{9BB5B49C-0D59-418d-A6A5-F6373B8FEF64}\InProcServer32
• Key: SOFTWARE\Classes\CLSID\{9BB5B49C-0D59-418d-A6A5-F6373B8FEF64}
• Key: SOFTWARE\Classes\CLSID\{9BB5B49C-0D59-418d-A6A5-F6373B8FEF64}\InProcServer32
  Value: ThreadingModel
• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9BB5B49C-0D59-418d-A6A5-F6373B8FEF64}
  Value: 1
• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/access.ocx
  Value: .Owner
• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/access.ocx
  Value: {20048BB3-DB68-11CF-9CAF-00AA006CB425}
• Key: Software\Microsoft\Code Store Database\Distribution Units\{20048BB3-DB68-11CF-9CAF-00AA006CB425}
  Value: Installer
• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Startup
  Value: DisplayName
• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Startup
  Value: UninstallString
• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9125F250-EB4F-49fe-AE17-C17665873A5C}
  Value: 1
• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/msnnames.ocx
  Value: .Owner
• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/msnnames.ocx
  Value: {20048BB3-DB68-11CF-9CAF-00AA006CB425}
• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\iexplore
  Value: Type
• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\iexplore
  Value: Count
• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{20048BB3-DB68-11CF-9CAF-00AA006CB425}\iexplore
  Value: Time
• Key: Software\WinRAR SFX
  Value: C%programfiles%2search
• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\2search
  Value: DisplayName
• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\2search
  Value: UninstallString
• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  Value: 2Search
• Key: Software\BHO
  Value: Started
• Key: Software\BHO
  Value: DllVer
• Key: Software\BHO\files
  Value: bho.dat
• Key: Software\BHO\files
  Value: er.dat
• Key: Software\BHO
  Value: LastUpdateTime
• Key: Software\BHO
  Value: Started
• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F41E9234-774D-407d-B8C8-7E6C16FE108B}
  Value: 1
• Key: Software\BHO
  Value: ModId
• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Startup
  Value: DisplayName
• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Startup
  Value: UninstallString

Notification: It is unsafe to make any changes amongst registry entries when you are not sure what to do. It is strongly recommended to keep out of them. You should only delete registry entries using professional guidance. If you use Removal Tool you will have no need in manual changes in Registry.

» Get Removal Tool for FREE

Next threat: AAABestHomepage »

Learn more about 2Search and stdrun6.exe »

« Back to catalog