COVID-19
CES 2021 FULL COVERAGE
The Latest New Products Must-See
Controlling VR with my mind: NextMind's dev kit shows me a strange new world
Galaxy S21 vs. S20 vs. S20 FE vs. Note 20 specs compared: All of Samsung's updates
All the best products
Award Winners Versus Best Headphones Best Laptops Best Phones Best TVs Best Speakers Best Routers Best Smart Home Best Tablets Best Digital Cameras Best Hard Drives Best AV Receivers Best Media Streamers Best iPhone Apps Best Coffee Machines Best Cash Back Credit Cards Best TV Streaming Services Best VPN Service Best Massage Guns Best Mattresses
All reviews
Appliances Audio Cameras Cars Desktops Drones Headphones Laptops Media Streamers Monitors Networking Phones 5G Phones Printers Smart Home Speakers Tablets TVs VPNs Wearables & VR Web Hosting
All news
5G Apple Computers Culture Games Google Internet Microsoft Mobile Sci-Tech Security Tech Industry
More
Newsletters Now What Photo Galleries Special Features Videos
All how to
5G Mobility Appliances Computers Gaming Home Entertainment Internet Mobile Apps Personal Finance Phones Photography Security Smart Home Streaming TV Tablets Wearable Tech Q&A Forums
All personal finance
Credit Cards Taxes Budgeting Investing
All health and wellness
Fitness Sleep Healthy Eating Caregiving Personal Care
All smart home
Best smart home devices Guide to smart living Voice-powered smart home News Tour our smart apartment Tour our smart house
Product compatibility
Amazon Alexa Apple HomeKit Belkin WeMo Google Assistant Lutron Nest Philips Hue Samsung SmartThings Wink
Roadshow
Reviews Video News Pictures Recalls AutoComplete Carfection Cooley On Cars Car Audio Electric Cars Auto Buying Program
Best cars
Best Affordable Cars Best Crossovers Best Electric Cars Best Family Cars Best Fuel-Efficient Cars Best Hybrids Best Sedans Best SUVs Best Trucks
All deals
The Cheapskate Antivirus Deals Identity Theft Protection Deals Mattress Deals Meal Kit Deals Password Manager Deals Pillow Deals Prescription Glasses Deals Tax Service Deals VPN Deals Web Hosting Deals
All coupons
Adidas Coupons AliExpress Coupons DoorDash Promo Codes eBay Coupons ExpressVPN Coupons Nike Coupons Office Depot Coupons Overstock Coupons Postmates Coupons Samsung Coupons Staples Coupons Verizon Promo Codes Vistaprint Coupons Walmart Coupons
5G
Editions
English France Germany Japan Korea
Settings
My Profile Forums Sign Out
Join / Sign In
  • Forums
  • Windows Legacy OS

Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

azesearch bulls**t

by russ russell May 18, 2005 12:22AM PDT

hi all,
only a week after fixing the nightmare of lsass problems (which did turn out to be the sasser virus)
i've now very stupidly got myself in a mess with the azesearch toolbar and all the crap that comes with it. i'm running adaware, spybot, spysubtract, norton, hijack this, and killbox, but i cant get rid of this stuff, here's my latest HJT logfile, i think i know what to delete but can anyone give me some pointers just so i dont wreck my system (again!)
thanks - russ "*******" russell

Logfile of HijackThis v1.99.1
Scan saved at 15:05:32, on 18/05/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\uniuclt1.exe
D:\Program Files\SpySubtract\SpySub.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\RR\LOCALS~1\Temp\Rar$EX00.554\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: 69.50.166.13 www.google.com
O1 - Hosts: 69.50.166.13 google.com
O1 - Hosts: 69.50.166.13 www.google.co.uk
O1 - Hosts: 69.50.166.13 google.co.uk
O1 - Hosts: 69.50.166.13 www.google.ca
O1 - Hosts: 69.50.166.13 google.ca
O1 - Hosts: 69.50.166.13 www.google.es
O1 - Hosts: 69.50.166.13 google.es
O1 - Hosts: 69.50.166.13 www.google.de
O1 - Hosts: 69.50.166.13 google.de
O1 - Hosts: 69.50.166.13 www.google.fr
O1 - Hosts: 69.50.166.13 google.fr
O1 - Hosts: 69.50.166.13 www.google.com.au
O1 - Hosts: 69.50.166.13 google.com.au
O1 - Hosts: 69.50.166.12 www.yahoo.com
O1 - Hosts: 69.50.166.12 yahoo.com
O1 - Hosts: 66.218.75.184 mail.yahoo.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: AzEntretien Class - {0d2def3a-f4f1-42ec-ac4f-132e7ba6e292} - %SystemRoot%\azentretien.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: ZToolbar Activator Class - {da7ff3f8-08be-4cac-bc00-94d91c6ae7f4} - C:\WINDOWS\system32\azesearch3.ocx
O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - C:\WINDOWS\system32\iasadm.dll
O3 - Toolbar: AZE Search - {a19ef336-01d4-48e6-926a-fe7e1c747aed} - C:\WINDOWS\system32\azesearch3.ocx
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [I0ppRfi5P] uniuclt1.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: SpySubtract.lnk = D:\Program Files\SpySubtract\SpySub.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch3.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

Discussion is locked

1 Posts
- Collapse + Expand Details
- Collapse -
A few things.
by r. proffitt Former Forum moderator May 18, 2005 12:29AM PDT

These forums don't have the people to do HJT logs. See http://reviews.cnet.com/5208-6132-0.html?forumID=32&threadID=97199&messageID=1106892 for such help.

I'm interested to hear how one can catch that old worm. XP SP2 is immune to that.

Bob

Back to Windows Legacy OS forum

CNET Forums

Operating Systems
  • Windows 10
  • Windows 8
  • Windows 7
  • Windows Vista
  • Windows Legacy OS
  • Mac OS
  • Linux
  • Chrome OS
  • Android
Software
  • PC Applications
  • Mac Applications
  • Mobile Applications
  • Spyware, Viruses, & Security
  • Office & Productivity Software
  • Audio & Video Software
  • Photo Editing & Graphic Design
  • Browsers, E-mail, & Web Apps
Electronics & Gadgets
  • Cameras
  • Video Cameras
  • TVs & Home Theaters
  • HDTV Picture Setting
  • Smart Home & Appliances
  • Video Games & Consoles
Hardware
  • Desktops
  • Mac Desktops
  • Laptops
  • MacBooks
  • PC Hardware
  • Mac Hardware
  • Storage
  • Networking & Wireless
  • Peripherals
Tablets & Mobile Devices
  • Phones
  • Tablets
  • iPhones, iPods, & iPads
  • E-readers
  • Headphones & Mp3 Players
  • Wearable Tech
General Help
  • Computer Help
  • Computer Newbies
  • How To
  • Web Hosting, Design, & Coding
  • Internet Service Providers
  • Small business & Startups
Brand Forums
  • Avast & AVG
  • Dell
  • HP
  • LG
  • Samsung
  • Sony
Roadshow Autos
  • Car Buying Tips - Roadshow
  • Car Parts, Gadgets, & How-to's - Roadshow
  • Car News, Rumors, & Concepts - Roadshow
  • Auto Repair - Roadshow
  • Community Garage - Roadshow
Off Topic
  • The CNET Lounge
  • Speakeasy
  • Download.com Site Feedback
  • Tech Deals
  • Forum Feedback & Announcements
  • Test

Other Forums

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic

Forum Info

  • Real-Time Activity
  • Resolved Questions
  • My Tracked Discussions
  • FAQs
  • Policies
  • Moderators
MORE FROM CNET
Stimulus check updates
Upgrade to Windows 10 for free right now
Best VPN service of 2021
The best Wi-Fi routers for 2021
Windows 10 tips and tricks
About
About CNET
Newsletter
Sitemap
Careers
Help Center
Licensing
Policies
Privacy Policy
Terms of Use
Cookie Settings
Do Not Sell My Information
Follow
© 2021 CNET, A RED VENTURES COMPANY. ALL RIGHTS RESERVED.