Don’t Think Twice, Remove 2ndThought Immediately
This annoying little bugger usually slips in unnoticed with other programs that are probably downloaded for free. Sometimes it appears in the form of a toolbar and sometimes it doesn’t. Either way, 2ndThought will monitor your Internet activities and deliver pop-up ads based on the content you have viewed.
2ndThought’s activities cause your computer to work slower and will also slow your Internet connection. It could also have other adware bundled with it. Therefore, you should have it removed as soon as you can.
In order to remove it manually, you must delete the following files:
[%PROFILE_TEMP%]\randreco.exe
[%PROFILE_TEMP%]\THI1EA2.tmp\VoiceIp.dll
[%PROFILE_TEMP%]\THI1EA2.tmp\VoiceIP.inf
[%PROFILE_TEMP%]\THI75D.tmp\VoiceIp.dll
[%PROFILE_TEMP%]\THI75D.tmp\VoiceIP.inf
[%PROFILE_TEMP%]\tt_unadd.inf
[%SYSTEM%]\2ndsrch.dll
[%SYSTEM%]\automove.exe_
[%SYSTEM%]\data.xml
[%SYSTEM%]\idleui.dll
[%SYSTEM%]\retpdat32.xml
[%SYSTEM%]\sp32.xml
[%SYSTEM%]\stcloader.exe
[%SYSTEM%]\swin32.dll
[%SYSTEM%]\SWRT01.dll
[%WINDOWS%]\bokja.exe
[%WINDOWS%]\jawa32.ocx
[%WINDOWS%]\stcloader.exe
[%WINDOWS%]\voiceip.dll
[%DESKTOP%]\second thought.lnk
[%DESKTOP%]\spediabar.lnk
[%PROFILE%]\administrator\start menu\programs\spediabar.lnk
[%PROFILE%]\locals~1\temp\randreco.exe
[%SYSTEM%]\automove.exe
[%SYSTEM%]\cdsm32.dll
[%WINDOWS%]\mwsvm.ocx
[%WINDOWS%]\system\idleui.dll
[%WINDOWS%]\system\stcloader.exe
You must also delete the following folders:
[%FAVORITES%]\ cool stuff
[%PROGRAMS%]\addestroyer
[%PROGRAM_FILES%]\clearsearch
[%PROGRAM_FILES_COMMON%]\slmss
[%PROFILE_TEMP%]\132.zip
[%PROGRAM_FILES%]\common files\slmss
[%PROGRAM_FILES%]\second thought
[%PROGRAM_FILES%]\stc
Then you must delete the following registry keys:
HKEY_CLASSES_ROOT\clsid\{00000250-0320-4dd4-be4f-7566d2314352}
HKEY_CLASSES_ROOT\clsid\{5fa6752a-c4a0-4222-88c2-928ae5ab4966}
HKEY_CLASSES_ROOT\clsid\{965a592f-8efa-4250-8630-7960230792f1}
HKEY_CLASSES_ROOT\csie.csiecore
HKEY_CLASSES_ROOT\csie.csiecore.1
HKEY_CLASSES_ROOT\interface\{0f2a4adc-dabf-4980-8db4-19f67d7b1f95}
HKEY_CLASSES_ROOT\interface\{96b3b1b9-a510-4603-bd66-2bb2c9f21542}
HKEY_CLASSES_ROOT\typelib\{60494593-5408-447d-bd5e-a16640d6af99}
HKEY_CLASSES_ROOT\typelib\{69db5061-ff0a-418b-ada6-68ac77d69e44}
HKEY_CLASSES_ROOT\urlsearch.urlsearch.1
HKEY_CLASSES_ROOT\voiceipdll.voiceipdllobj.1
HKEY_CLASSES_ROOT\clsid\{13197ace-6851-45c3-a7ff-c281324d5489}
HKEY_CLASSES_ROOT\clsid\{95c60327-8e17-44d6-98eb-7eb70cc606dd}
HKEY_CURRENT_USER\software\stc
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{00000250-0320-4dd4-be4f-7566d2314352}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{5fa6752a-c4a0-4222-88c2-928ae5ab4966}
The following registry values should also be deleted:
HKEY_LOCAL_MACHINE\software\bokja, 1=1.3.0.0
HKEY_LOCAL_MACHINE\software\bokja, qoke=B6A376C7-45C9-4D27-A85B-4B69BF91F237
HKEY_LOCAL_MACHINE\software\bokja, vmos=1094268181
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, adstartup=[%SYSTEM%]\automove.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, bokja=[%WINDOWS%]\bokja.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\contextsidebar, displayname=Context Display
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\contextsidebar, uninstallstring=[%PROGRAM_FILES%]\ClearSearch\FNuninstaller.EXE -f4
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\contextsidebar, uninstallstring=[%PROGRAM_FILES%]\CSBB\FNuninstaller.EXE -f4
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\mirrorunder, displayname=Alt Win
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\mirrorunder, displayname=Lycos Search
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\mirrorunder, uninstallstring=[%PROGRAM_FILES%]\ClearSearch\FNuninstaller.EXE -f8
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\mirrorunder, uninstallstring=[%PROGRAM_FILES%]\CSBB\FNuninstaller.EXE -f8
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ronsidebar, displayname=RON Display
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ronsidebar, uninstallstring=[%PROGRAM_FILES%]\ClearSearch\FNuninstaller.EXE -f7
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ronsidebar, uninstallstring=[%PROGRAM_FILES%]\CSBB\FNuninstaller.EXE -f7
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spidersidebar, displayname=LookSmart Search
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spidersidebar, uninstallstring=[%PROGRAM_FILES%]\ClearSearch\FNuninstaller.EXE -f5
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\urlsidebar, displayname=URL Display
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\urlsidebar, uninstallstring=[%PROGRAM_FILES%]\ClearSearch\FNuninstaller.EXE -f3
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\urlsidebar, uninstallstring=[%PROGRAM_FILES%]\CSBB\FNuninstaller.EXE -f3
HKEY_LOCAL_MACHINE\software\y036, updates=0
HKEY_LOCAL_MACHINE\software\bokja, 1=
HKEY_LOCAL_MACHINE\software\bokja, qoke=
HKEY_LOCAL_MACHINE\software\bokja, vmos=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, adstartup=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, bokja=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, sqinstaller=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, stcloader=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\contextsidebar, displayname=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\contextsidebar, uninstallstring=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\mirrorunder, displayname=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\mirrorunder, uninstallstring=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ronsidebar, displayname=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ronsidebar, uninstallstring=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spidersidebar, displayname=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spidersidebar, uninstallstring=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\urlsidebar, displayname=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\urlsidebar, uninstallstring=
HKEY_LOCAL_MACHINE\software\y036, updates=
Removing all of these could take a very long time and it won’t guarantee that the pop-ups will stop. If 2ndThought has been bundled with other adware, then you will need to have them deleted as well.
The best option is to get SpyZooka to remove all of the infectious software on your computer. SpyZooka is the only antispyware program guaranteed to remove 100% of spyware. If you have this quality antispyware program then you computer will be back to normal in no time at all.