Over 1 million tech questions and answers.

res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm (RESOLVED)

Q: res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm (RESOLVED)

Hi

I am using Internet explorer and cannot connect to the ebay web pages. When I try I get an action canceled page displayed and the url entry changes to - res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm

I have installed Mozilla and initially this worked but as of today, when I enter the ebay URL nothing happens.

please help

Phil

RELEVANCY SCORE 200
Preferred Solution: res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm (RESOLVED)

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm (RESOLVED)

start>run type in the following command to re-register the dll's

Regsvr32.exe %Windir%\System32\Ole32.dll

Read other 4 answers
RELEVANCY SCORE 111.2

Hey, When ever i try to use IE i get on Google for like 5 seconds then it redirects me to res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm
I'm using Windows 7 64 bit, and here is my Hijacklog.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:44:05 AM, on 10/31/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.7930.16406)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Internet Explorer\iexplore.exe
c:\windows\syswow64\kjqvzfd\atisvc_cvvinf.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
C:\Program Files (x86)\RayV\RayV\RayV.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\... Read more

A:res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the ... Read more

Read other 2 answers
RELEVANCY SCORE 111.2

My office computer started giving me this error this morning. Please help!

hijack this log:
Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 11:11:57 AM, on 1/22/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Intel\AMT\LMS.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxduserv.exe
C:\WINDOWS\system32\lxducoms.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
C:\Program Files\Common Files\Intel\Privacy Icon\UNS\UNS.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
C:\WINDOWS\system32\SearchIndexer.exe
c:\Program Files\Dell\Dell ControlPoint\System Manager\DCPSysMgrSvc.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\I... Read more

Read other answers
RELEVANCY SCORE 111.2

Any help anyone can provide would help greatly... i know that u all have prob helped many ppl with this and im sorry to do this to ya but I keep getting this message on my work computer. When i type in certain webpages it just give me the "Action cancelled" msg and res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm at the toolbar.

Now i know a bit about computers but not the extent of genius so idiot-proof term. Also the problem is actually on my work computers (as i mentioned before) so i dont really wanna fiddle around with it too much as my boss as put sytem administrator on my computer (side note: does anyone know how to take it off? she has removed alot of my functions and its annoying).

Any information or help would be awesome!!!

THANK YOU.

A:res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm

As no logs have been posted, I am moving this from the HiJack This forum to the Am I Infected forum. ~ OB

Read other 1 answers
RELEVANCY SCORE 111.2

Help, I get this in the address bar whenever I try to go to gmail. That is the only time I have gotten the error so far.

Read other answers
RELEVANCY SCORE 111.2

Hey everyone,
This is my first post and any help would be much appreciated. I run vista on my laptop and for about a week now I have had something strange going on with my internet. I can access many websites, but whenever I try to access certain ones, I continually get an error message. res://C:\Windows\system32\shdoclc.dll/navcancl.htm will come up as my url. I have run complete scans with both SUPERAntiSpyware and Malwarebytes' Anti-Malware. Neither of these have detected anything. If anyone knows how to resolve this problem, I would love to know. Thanks in advance.

A:Res://c:\windows\system32\shdoclc.dll/navcancl.htm

Hi! Maybe you should try scaning the computer with Spy-bot Search & Destroy.

It will check for registery problems.

Have a nice day!

Read other 2 answers
RELEVANCY SCORE 111.2

I know others have had this problem before. Please help me walk through my own computer and fix it! Thanks!
DDS (Ver_09-03-16.01) - NTFSx86
Run by Kyle at 20:58:54.98 on Thu 05/07/2009
Internet Explorer: 8.0.6001.18702
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.1982.838 [GMT -5:00]

AV: Trend Micro OfficeScan Antivirus *On-access scanning enabled* (Updated)
AV: Norton Internet Security *On-access scanning enabled* (Outdated)
FW: Trend Micro Personal Firewall *enabled*
FW: Norton Internet Security *disabled*

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\rundll32.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchos... Read more

A:res://C:\Windows\system32\shdoclc.dll/navcancl.htm

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

Read other 2 answers
RELEVANCY SCORE 111.2

When I try and go to certain websites (I'm sure there are more I haven't run into yet) I get this thread in my address bar "res://C:\Windows\system32\shdoclc.dll/navcancl.htm"..... Does anyone have a fix for this. I have ran Ad Aware, SpyBot ,CWshredder, and RegCure and I still have the problem. Please Help! I have to pay a Kohl's bill and can't get to the site!

Here's me DDS.txt

DDS (Version 1.1.0) - NTFSx86
Run by Lynda at 14:18:40.58 on Wed 12/31/2008
Internet Explorer: 7.0.6001.18000
Microsoft? Windows Vista? Home Basic 6.0.6001.1.1252.1.1033.18.958.192 [GMT -5:00]

AV: Symantec Endpoint Protection *On-access scanning enabled* (Updated)
FW: Symantec Endpoint Protection *enabled*

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
C:\Windows\system32\svchost.... Read more

A:res://C:\Windows\system32\shdoclc.dll/navcancl.htm

Welcome to BC

Sorry for the delay

Please post a fresh DDS log . Thanks

Read other 16 answers
RELEVANCY SCORE 111.2

Hey everyone I'm new to BleepingComputer and I didn't know where to post this :/but some websites aren't working for methis has never happened before and I don't know what to doI've read some other threadsand "HijackThis" was mentioned a lotso I downloaded it, and this is my log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 6:52:56 PM, on 17/02/2010Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v8.00 (8.00.6001.18882)Boot mode: NormalRunning processes:C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exeC:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\HP\QuickPlay\QPService.exeC:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exeC:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exeC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exeC:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exeC:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exeC:\Program Files\Java\jre1.6.0_07\bin\jusched.exeC:\Program Files\HP\HP Software Update\hpwuSchd2.exeC:\Program Files\Comm... Read more

A:HELP res://C:\Windows\system32\shdoclc.dll/navcancl.htm?

nobody knows anything about this? ===========Hello While we understand your frustration at having to wait, please note that Bleeping Computer deals with several hundred requests for assistance such as yours on a daily basis. As a result, our backlog is quite large as are other comparable sites that help others with malware issues. Although our HJT Team members work on hundreds of requests each day, they are all volunteers who work logs when they can and are able to do so. No one is paid by Bleeping Computer for their assistance to our members.Further, our malware removal staff is comprised of team members with various levels of skill and expertise to deal with thousands of malware variants, some more complex than others. Although we try to take DDS/HJT logs in order (starting with the oldest), it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, neither of us want someone to assist you who is not familiar with your issue and attempt to fix it.We ask that once you have posted your log and are waiting, please DO NOT "bump" your thread or make further replies until it has been responded ... Read more

Read other 4 answers
RELEVANCY SCORE 111.2

Hi,

My computers had lots of problems. Help would be greatly appreiciated.
Here is my lo file


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:50:24 PM, on 10/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ccmsetup\ccmsetup.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\Wuser32.exe
C:\WINDOWS\system32\CCM\CcmExec.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\... Read more

A:res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm# and more.

Bump,

Read other 8 answers
RELEVANCY SCORE 111.2

Hello bleeping computer community, (or whoever will read this)

About a month ago now visited the UK with my laptop. When overseas my normal antivirus program, ESET, expired. I thought I could wait until I got back to the states until I would renew it. I downloaded a thing or two (forget what they were), and that is when this message (res://C:\Windows\system32\shdoclc.dll/navcancl.htm) started appearing in my IE address bar thing... Immediately, I deleted downloaded files and ran a free antivirus software that I had heard was good called Avast! No luck. Got back to the states and was convinced that once I renewed ESET everything would be OK. Renewed it. Found a bug or two. Rebooted but still... no luck. After trying every free antivirus software known to man, hundreds of reboots, and hours of trying to solve this problem, I downloaded Google Chrome to see if I would get the same message I do in IE. Oddly, it takes me to about:blank. AGHH!!!! But that doesn't really matter because its still bleeping frustrating!

(see what I did there? huh? huh? I'll be here all week)

There are also two buttons on the left side of my laptop which control the sound. Usually, when I press these buttons a few green bars will appear and show if the sound is going up or down. Now, it is still controlling the sound, but no bars. (Idk I just wanted to tell you everything I have figured out)

Anything would help now,
xPepsi

Read other answers
RELEVANCY SCORE 111.2

Every time I open internet explorer, before it loads my homepage it comes up with a url that I do not recognize, it looks like some sort of spyware. It loads this url first: res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htmThis is my HijackThis log file:Logfile of HijackThis v1.99.1Scan saved at 12:22:50 AM, on 04/03/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\NMSSvc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\hkcmd.exeC:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exeC:\Program Files\Messenger\msmsgs.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\iPod\bin\iPodService.exeC:\Program Files\AIM\aim.exeC:\Documents and Settings\mn\Desktop\hijackthis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://devineone.livejournal.com/O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper... Read more

A:Res://c:\windows\system32\shdoclc.dll/navcancl.htm

Hi Mary-Nicole and welcome to Bleeping. There's nothing untoward in your HJT log from what I can see.We'll try and repair IE's search defaults for you to see if it solves the problem. Right-click here and select Save as...Save the reg file to your desktop and then CLOSE IE.Double-click RepairIE4XP.reg and confirm you wish to add the contents to your registry when prompted.Reopen IE and let me know if the problem is solved.

Read other 2 answers
RELEVANCY SCORE 111.2

Please help!! When I start up IE (or aol) it will work for about 5 or 6 sites that I visit. Shortly after, any site that I try to access I will get a "page cannot be displayed" message. In the website bar I get the message "res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm" followed by the website I am trying to access. The only way I can get IE or aol to work again is to reboot and start all over again. I have run virus checks, hijack this, adaware, norton. I have cleared all cookies and temp internet files. This is very frustrating. Please help. I am somewhat computer literate but not completely knowledgable of computer lingo, so please, any response in easy terms would be great. Thank you so much for any help you can give.

A:res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm

The internet is a great place...by putting your error into a search engine and whola...only three so you dont have to reboot :)

http://www.talkaboutsoftware.com/gro...es/405020.html

http://www.techspot.com/vb/all/windo...vcanclhtm.html

http://www.bleepingcomputer.com/forums/topic13865.html

Read other 3 answers
RELEVANCY SCORE 111.2

This may be a common problem. Whenever I try to access certain websites it always comes up with the messege in the address bar: res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm. I might add that it doesn't happen with only one site, it happens with several pages.

I use XP SP2 with IE7. I have also tried to view the same pages in Firefox3 and with Firefox it redirects to a blank page. Sometimes this will occur if I type in something specific like 'tenacious d'. However there doesn't seem to be a connection between the things I type in or view.

Read other answers
RELEVANCY SCORE 111.2

I'm new to this forum (my 1st post!) and I'm really hoping to find a solution to the issue I'm having with my computer. I've seen other forums which seem tooffer solutions, but so far nothing seems to be working. I've attached (I hope)my HijackThis logfile in hopes of finding the right solution.

A:Res://c:\windows\system32\shdoclc.dll/navcancl.htm

Hio and welcome,Sorry for the delay. We have been backlogged.Is it only the insightbb page you have trouble getting to? Any others? If you still need help please do the following:Please download Deckard's System Scanner (DSS) and save to your Desktop.alternate download siteDSS will do the following:Create a new System Restore point in Windows XP and Vista.Clean your Temporary Files, Downloaded Program Files, Internet Cache Files, and empty the Recycle Bin on all drives.Check some important areas of your system and produce a report for an analyst to review.Automatically run HijackThis. It will also install and place a shortcut to HijackThis on your desktop if you do not already have it installed. So if HijackThis is not installed and DSS prompts you to download it, please answer yes.You must be logged onto an account with administrator privileges when using.Close all applications and windows.Double-click on dss.exe to run it and follow the prompts. (On Vista; right click dss.exe and choose run as administrator)If your anti-virus or firewall complains, please allow this script to run as it is not
malicious.When the scan is complete, two text files will open in Notepad:main.txt <- this one will be maximizedextra.txt <- this one will be minimizedIf not, they both can be found in the C:\Deckard\System Scanner folder.Please copy (Ctrl+C) and paste (Ctrl+V) the contents of main.txt and extra.txt in your next reply.-- When running DSS, some firewalls may warn that it ... Read more

Read other 17 answers
RELEVANCY SCORE 111.2

I'm getting this error code (res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm) and have followed the steps, here is my main log and my extra file is attached. I'm only getting this when I try to access certain pages (i.e. snopes.com, craigslist.org, myspace.com) other pages I have no problem getting to. I've already done a system search and cleared out all wild tangent files and folders. thanks, malcolm

[Deckard's System Scanner v20071014.68
Run by E and M on 2007-11-03 18:10:03
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
113: 2007-11-03 22:10:10 UTC - RP1195 - Deckard's System Scanner Restore Point
112: 2007-11-03 06:56:11 UTC - RP1194 - System Checkpoint
111: 2007-11-02 06:22:27 UTC - RP1193 - Software Distribution Service 3.0
110: 2007-11-02 02:28:40 UTC - RP1192 - System Checkpoint
109: 2007-11-01 01:48:44 UTC - RP1191 - System Checkpoint


-- First Restore Point --
1: 2007-08-06 18:46:22 UTC - RP1083 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as E and M.exe) ---------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:14:07 PM, on 11/3/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explo... Read more

Read other answers
RELEVANCY SCORE 111.2

I've never done a forum before. I found some references to the above title but the problem wasn't quite the same. It started today. I have MSN.com through Qwest. I prefer using IE7 and Outlook over MSN for the interent and e-mail.

Yesterday I joined a "group" in groups.yahoo.com. I had no problem jumping in and out of the website. But today, when I try to enter the website I get this response:

"res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm"

in the address window and this message appears:

"Action canceled
Internet Explorer was unable to link to the Web page you requested. The page might be temporarily unavailable. Please try the following:
Click the Refresh button, or try again later.
If you have visited this page previously and you want to view what has been stored on your computer, click File, and then click Work Offline.
For information about offline browsing with Internet Explorer, click the Help menu, and then click Contents and Index.
Internet Explorer"
Now, if I leave IE7 and use MSN, I can get directly onto the site without any problems. Even if I change Tabs, IE7 won't let me access groups.yahoo.com.

I ran virus, spyware scan, uninstalled and installed IE7. I restored but can't seem to be able to use IE7 to get onto the website.

I know enough about computers to get into lots of trouble if I get in over my head, so before that happens, I'm asking for help.

Read other answers
RELEVANCY SCORE 111.2

Hello -
My son is having issues with his computer and gets the following res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm when playing games etc on the web. From what I have read it might be malware or the fact that Norton Internet security came installed on the computer which I had a hard time removing, but got a file from symantec to try to get rid of it. I had the hijackthis on my old computer, Where can I find that again and can I submit it for someone to look at? Help please! Thanks!
Karen
 

A:res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm

You used the Norton Removal Tool? Run it (again).

If you are suspecting malware you can post a HijackThis log in the Malware Removal forum. Please read the first two sticky threads there before posting. And beware that they are extremely busy; bump your thread every day or two until you get a response.
 

Read other 1 answers
RELEVANCY SCORE 111.2

I have run all sort of antivirus/spyware programs but none shows anything wrong. Anytime I click on a hyperlink to open a new window, it gets stuck on blank page; when I hit stop I get this in URL: res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm Please help... attached is my hijackthis log: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:13:09 AM, on 2/25/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE C:\WINDOWS\system32\notepad.exe C:\Documents and Settings\waseem.muhammad\My Documents\hijack\HiJackThis.exe C:\WINDOWS\system32\NOTEPAD.EXE O1 - Hosts file is located at: C:\WINDOWS\System32\drivers\etc\hosts O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [Communicator] "C:\Program Files\Microsoft Office Communicator\Communicator.exe" (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Communicator] "C:\Program Files\Microsoft Office Communicator\Comm... Read more

A:Res://c:\windows\system32\shdoclc.dll/navcancl.htm

I apologize for the very long delay. We have a huge backlog of HijackThis Logs to handle and it has been taking us greater time than normal to get caught up. If you are still having a problem, and want us to analyze your information, please post a brand new hijackthis log. If we do not hear back from you within a couple of days we will need to close your topic.When posting your logs please post them directly into the reply. Do not attach them.Also make sure you have already followed the steps outlined below:Preparation Guide For Use Before Posting A Hijackthis LogThank you for your patience.

Read other 1 answers
RELEVANCY SCORE 111.2

Can someone please tell me what the heck is wrong with this?? Only when i go to craigslist.org do i get this coming up.....res://C:\windows\system32\shdoclc.dll/navcancl.htm

The site loads for about 1 sec then goes straight to that. If I use google chrome the site works fine, or if i use a proxy it works fine.....it is just driving me bonkers!!!!

thank you

i havent slept in about 3days....
 

Read other answers
RELEVANCY SCORE 111.2

Hello all you computer wizards,

Can somebody please help me to get rid of a.m. very annoying virus/spyware?
I got it a couple of days ago and I inmediately had Adaware, Spybot and Spyware Nuker get rid of it. None of the 3 was able to do it.

Please find enclosed my hjt:

Logfile of HijackThis v1.99.0
Scan saved at 1:50:48, on 29-12-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\Program Files\Norton Internet Security\ccPxySvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Speed Disk\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
C:\WINDOWS\System32\hphmon03.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Thomson\SpeedTo... Read more

A:res://C:\WINDOWS\System32\shdoclc.dll/navcancl.htm

Read other 6 answers
RELEVANCY SCORE 111.2

Hello, our browser is stuck on: res://C:\WINDOWS\System32\shdoclc.dll/navcancl.htm - and will not do much else.

Here is our latest logfile using Hijackthis - Thank you, we appreciate anyone's time, advice and help on fixing this problem:
=========================
Logfile of HijackThis v1.99.1
Scan saved at 12:42:55 PM, on 3/9/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\unzipped\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKCU\Software\Micros... Read more

A:res://c:\windows\system32\shdoclc.dll/navcancl.htm

Looks to me like you've been nobbled by a parasite related to Coolwebsearch. Google this file from your HJT log - CSRSSU.EXE You should find lots of information via Google, I personally prefer Adaware SE. Good luck.
 

Read other 12 answers
RELEVANCY SCORE 111.2

Hi, I'm new in this forum and this is my first post. I need some help regarding my browser. Whenever I click a link to open in a new browser, there would be nothing on the address bar or the page but when I click the stop button, this address would appear res://C:\WINDOWS\System32\shdoclc.dll/navcancl.htm. I had cleaned up my PC of various spywares and viruses using adaware, spyware doctor and some other softwares and online scanning tools earlier. Hope someone can help me please. Hea is a log from my Hijackthis:Logfile of HijackThis v1.99.1Scan saved at 2:25:01 AM, on 2/19/2005Platform: Windows XP (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\ctfmon.exeC:\WINDOWS\system32\drivers\KodakCCS.exeC:\WINDOWS\System32\nvsvc32.exeC:\WINDOWS\system32\pctspk.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Program Files\Internet Explorer\iexplore.exeC:\Documents and Settings\victor\Desktop\HijackThis.exe... Read more

A:res://C:\WINDOWS\System32\ shdoclc.dll/navcancl.htm

Hello Victor, Welcome to BleepingComputer. If you still need help, let's do this.1) Right click on a blank spot on the Desktop and make a NEW FOLDER called HJT. Move the HJT.exe into that folder so HJT will have a place to store backups for safety.2) HJT indicates you have no Service Pack and no critical updates. You need to navigate to Windows Updates and download all suggested critical stuff for your computer. I do not suggest SP2 while you have this infection. Here is some valuable information to help you with the decision:What you should knowhttp://www.microsoft.com/windowsxp/sp2/sp2_whattoknow.mspx3) Scan with HijackThis and check the box in front of each of these line items.R3 - URLSearchHook: (no name) - _{00D6A7E7-4A97-456f-848A-3B75BF7554D7} - (no file)R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)O2 - BHO: CFilter Object - {2A7B720A-7A28-4e99-80A0-2DF985EC93D0} - C:\WINDOWS\System32\font.dllMake-deal.com malwareO2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)(above is SpywareDoctor which is not working, I will remove the 04 also. If you wish to continue using this software you will have to reinstall it once you are clean)O4 - HKCU\..\Run: [Spyware Doctor] D:\Spyware Doctor\swdoctor.exe /QO15 - Trusted Zone: http://ny.contentmatch.net (HKLM)(I suggest you remove the above, I would very very careful who you allow into your trusted zone)O16 - DPF: {15AD6789-CDB4-47E1-A... Read more

Read other 4 answers
RELEVANCY SCORE 111.2

Here's the log file:
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:04:49 PM, on 5/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Sinnamon Spider\Desktop\HJT\HiJackThis_v2.exe

R1 - ... Read more

A:Yet another res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm

Hi Sinnamonspider

I apologize for the delay getting to your log. The helpers here are all volunteers and we have been very busy here lately. If you are still having malware problems, I will be glad to help.

==============================

Please read this post completely before begining the fix. If there's anything that you do not understand, kindly ask your questions before proceeding. Please ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.


IT IS IMPORTANT THAT YOU DON'T MISS A STEP & PERFORM EVERYTHING IN THE RIGHT ORDER.

We also suggest that you Subscribe to this thread to be notified of fixes as soon as they are posted by our Team. You can do this simply by clicking the "Thread Tools" button located in the original thread line and selecting "Subscribe to this Thread".

=======================================


1. Download this file - Here

* IMPORTANT !!! Place combofix.exe on your Desktop


Double click on combofix.exe & follow the prompts.
When finished, it shall produce a log for you.

Post the ComboFix.txt in your next reply.

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

=============================

The log you've posted is the beta version of HijackThis and is still under development. Please note... Read more

Read other 1 answers
RELEVANCY SCORE 110

My daughter's computer just started getting this message about two weeks ago. She has a Dell 1501 inspiron that runs vista. I have ad-ware 2007 and superantispyware which I am running now. I typed some thing in to my start search that started with reg. something about reloaded them. I don't remember what it was and forgot to write it down. Well it said successful with error 0x800000something. Anything else I can do?

A:message: res://C:\Windows\system32\shdoclc.dll/navcancl.htm

Hi jdm128, Welcome to TSF

I think that is actually an ad ware problem.

There is a special section at TSF to deal with these. If you could have a read of this and follow the steps it outlines, then post your log by creating a new thread here , it should be solved.

Also, please note that the above section of the site is VERY busy so replies may be delayed.

Hope this helps.

Read other 1 answers
RELEVANCY SCORE 110

Hi again. I've been experiencing some problems with my browser. There are web links that seem to keep on reloading. The address that keeps on showing on the lower left bar is res://C:\WINDOWS\System32\ shdoclc.dll/navcancl.htm.

Here is my DDS log. I have also attached my Attach log. I hope you guys could help me with my problem. Thank you and more power.

DDS (Version 1.1.0) - NTFSx86
Run by Administrator at 20:51:57.26 on Mon 01/01/2001
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.254.75 [GMT 8:00]

AV: Avira AntiVir PersonalEdition *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS... Read more

A:Res-C-WINDOWS-System32-Shdoclc.dll-Navcancl.htm Problem

Download GMER Rootkit Scanner from here. Extract the contents of the zipped file to the desktop. Double click GMER.exe and if you are asked if you want to allow gmer.sys driver to load, please allow it to do so. If it gives you a warning about rootkit activity and asks if you want to run scan, please click on NO. In the right panel you will see several boxes that have been checked. Uncheck the following the following checkboxes: Sections IAT/EAT Drives/Partition other than Systemdrive (typically C:\) Show All (don't miss this one) Now click on the Scan button and wait for it to finish. Once done click on the [Save..] button, and in the File name area, type in ark.txt and save it to your desktop.Please post the contents of the ark.txt as your next reply.

Read other 9 answers
RELEVANCY SCORE 110

Hello! I really need some help. Hopefully I've provided you with what you need to see why I'm getting this message in my browser bar:

res://C:\windows\system32\shdoclc.dll/navcancl.htm

I only get this with random webpages, including the Netflix website. I've tried using my 64 and 32 IE but still getting the weird message above in my browser bar. I read somewhere that it could be malware due to the cool web search...something like that? I remember uninstalling that when I got this computer. This laptop was given to me by my brother so I'm not sure what his daughter looked up on here or could have gotten herself into. I've noticed that with some websites that display videos (CNN, etc.), I have to switch from the 64 IE to the 32 IE because I don't have the right version of Adobe Flash Player or they don't support the IE I have or something like that. Usually when I switch to the 32 IE, most videos play fine. With this situation I'm writing to you about, again, it doesn't seem to matter which IE I'm using.

Below is the DDS.txt report you requested. The attach.txt has been attached to this email in zip form. Please tell me if I haven't provided the right info or if I've attached something wrong. I've never dealt with anything like this before so I apologize in advance for any ignorance on my part! Thank you for ANY help you can provide so that we may use this laptop like normal people!!

DDS.txt report below:
DDS (Ver_2011-07-14.01) - NTFS_AMD64
Internet Explorer: 9.0.811... Read more

A:Please Help! Getting Message--> res://C:\windows\system32\shdoclc.dll/navcancl.htm

bump...

Read other 4 answers
RELEVANCY SCORE 110

Hello, my browser is stuck on: res://C:\WINDOWS\System32\shdoclc.dll/navcancl.htm - and will not do much else.

How do I get you a logfile using Hijackthis -

Thank you, I appreciate anyone's time, advice and help on fixing this problem:
 

A:Res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm error help

I would strongly suggest going over to the Virus and Malware forum, performing the steps in the instructional thread, and then posting the results over there. Your problem is far more likely to be a malware infection, and just a quick google search indicated that this is sometimes associated with trojan viruses.

That's your best starting point, and just as an fyi - I don't think that they use hijackthis over there. They have a thread with the format they like followed.
 

Read other 2 answers
RELEVANCY SCORE 110

ok when i start internet explorer for about a second i see the google start page then all of a sudden bam i'm redirected to res://C:\Windows\system32\shdoclc.dll/navcancl.htm i believe it's a virus causing this however i have scaned with malwarebytes and AVG i was even desprate and attempted to run a combofix scan but turned up nothing... how do i get IE working again??? here is the HJT log, Logfile of Trend Micro HijackThis v2.0.4Scan saved at 2:12:57 PM, on 9/28/2010Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v8.00 (8.00.6001.18943)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\ProgramData\DatacardService\DCSHelper.exeC:\Windows\RtHDVCpl.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\TOSHIBA\SmoothView\SmoothView.exeC:\Program Files\TOSHIBA\FlashCards\TCrdMain.exeC:\Program Files\HP\HP Software Update\hpwuSchd2.exeC:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exeC:\Windows\ehome\ehtray.exeC:\Program Files\Windows Media Player\wmpnscfg.exeC:\Windows\system32\svchost.exeC:\Windows\system32\wbem\unsecapp.exeC:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exeC:\Windows\ehome... Read more

A:IE error res://C:\Windows\system32\shdoclc.dll/navcancl.htm

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process. Please also continue to work with me until I give you the all clear. Even if your computer appears to act better, you may still be infected.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Once we start working together, please reply back within 3 days or this thread may be closed so we can help others who are waiting.We need to create an OTL report,Please downloa... Read more

Read other 2 answers
RELEVANCY SCORE 110

I'm ignorant when it comes to a lot of this stuff. I've done everything on the "Read this topic before posting a log" thread.Here is my log:Logfile of HijackThis v1.99.1Scan saved at 6:30:06 PM, on 11/26/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\Explorer.EXEC:\Program Files\McAfee\QuickClean\PlgUni.exeC:\WINDOWS\system32\SK9910DM.EXEC:\PROGRA~1\PANICW~1\POP-UP~1\dpps2.exeC:\WINDOWS\system32\atiptaxx.exeC:\sj655\hpupdate.exeC:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exeC:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\PROGRA~1\YAHOO!\browser\ybrwicon.exeC:\WINDOWS\System32\LXSUPMON.EXEC:\Program Files\McAfee.com\VSO\mcvsshld.exeC:\WINDOWS\system32\ezSP_Px.exeC:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exeC:\Program Files\H... Read more

A:Infected: Res://c:\windows\system32\shdoclc.dll/navcancl.htm

I don't know if this is any different, but I was browsing and realized I didn't know if I had any hidden files. So I followed the directions in one of the posts and redid HijackThis. Here's the new log.Logfile of HijackThis v1.99.1Scan saved at 9:09:47 PM, on 11/26/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\Explorer.EXEC:\Program Files\McAfee\QuickClean\PlgUni.exeC:\WINDOWS\system32\SK9910DM.EXEC:\PROGRA~1\PANICW~1\POP-UP~1\dpps2.exeC:\WINDOWS\system32\atiptaxx.exeC:\sj655\hpupdate.exeC:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exeC:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\PROGRA~1\YAHOO!\browser\ybrwicon.exeC:\WINDOWS\System32\LXSUPMON.EXEC:\Program Files\McAfee.com\VSO\mcvsshld.exeC:\WINDOWS\system32\ezSP_Px.exeC:\WINDOWS\system32\spool\drivers\w32x86... Read more

Read other 18 answers
RELEVANCY SCORE 110

I've been looking through the internet for solutions to this problem and I've repeatedly came to the same answer of people posting there hijackthis logs and then getting responses as to what to turn off. I'm hoping to do the same. I've run adaware and spybot, deleted my temporary internet files, cookies and emptied the recycle bin. I would greatly appreciate any help I can get.

Here is an overview of what is happening. When I load IE, the home page changes to a different web site and no matter how much I change the home page it still reverts back to a different address. At one point I pressed stop and the address bar showed:

res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm

Now when I press stop the address shows:

http://here4search.com/enter.htm?id=11040

Again, any help would be appreciated. Here is the hijackthis log file.

Logfile of HijackThis v1.99.0
Scan saved at 2:38:23 PM, on 05/01/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program File... Read more

A:Another help me thread about: res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm

Hi cvilleneuve, Welcome to TSG!!

Click on the link below to download CWshredder.
http://www.intermute.com/spysubtract/cwshredder_download.html

Run the program and let it do it's thing. Make sure to click on "Fix" and not scan only.

Reboot and post another log.
 

Read other 1 answers
RELEVANCY SCORE 110

Receiving this error and can't display the webpage everytime I try to access several websites (Facebook, Amazon etc.)

Tried running several scans and nothing is working. Ran the HJT and this is what I received...please help...

ogfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:07:16 AM, on 4/20/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\PLFSetI.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Citrix\GoToMeeting\320\g2mstart.exe
C:\Program Files (x86)\Citrix\GoToMeeting\320\g2mcomm.exe
C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\BackupManagerTray.exe
C:\Program Files (x86)\VideoWebCamera\VideoWebCamera.exe
C:\Program Files (x86)\Citrix\GoToMeeting\320\g2mlauncher.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Cyberlink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Cyberlink\PowerDVD8\PDVD8Serv.exe
C:\Windows\SysWOW64\svchost.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Windows\SysWow64\Macromed\Flash\FlashUtil10c.exe
C:\Users\RNB\AppData\Local\Citrix\ICA Client\wfcrun32.exe
C:\Users... Read more

A:res://C:\Windows\system32\shdoclc.dll/navcancl.htm Issue

Hello and welcome,

We require a more comprehensive set of logs to determine the presence of malware. Please follow the instructions in our sticky topic New Instructions - Read This Before Posting for Malware Removal Help and post the requested logs in your next reply.

**You may skip running gmer - it will not run on a 64-bit system.

Read other 1 answers
RELEVANCY SCORE 110

Hello! I really need some help. Hopefully I've provided you with what you need to see why I'm getting this message in my browser bar:

res://C:\windows\system32\shdoclc.dll/navcancl.htm

I only get this with random webpages, including the Netflix website. I've tried using my 64 and 32 IE but still getting the weird message above in my browser bar. I read somewhere that it could be malware due to the cool web search...something like that? I remember uninstalling that when I got this computer. This laptop was given to me by my brother so I'm not sure what his daughter looked up on here or could have gotten herself into. I've noticed that with some websites that display videos (CNN, etc.), I have to switch from the 64 IE to the 32 IE because I don't have the right version of Adobe Flash Player or they don't support the IE I have or something like that. Usually when I switch to the 32 IE, most videos play fine. With this situation I'm writing to you about, again, it doesn't seem to matter which IE I'm using.

Below, I've copied and pasted both the HijackThis log and the DDS.txt report you requested. The attach.txt has been attached as well. Please tell me if I haven't provided the right info or if I've attached something wrong. I've never dealt with anything like this before so I apologize in advance for any ignorance on my part! Thank you for ANY help you can provide so that we may use this laptop like normal... Read more

A:Please Help! Getting Message--> res://C:\windows\system32\shdoclc.dll/navcancl.htm

bump
 

Read other 1 answers
RELEVANCY SCORE 108.8

hi
can someone help me please because this problem means my son is unable to access internet and has exams coming up. today i tried to stop messenger on start up as it's a nuisance (still starts up anyway) and i'm not sure if that's what triggered this problem. we have 2 pc's - one desktop windows xp which is alos affected ( and I did not adjust settings on that one) and this one which is a windows vista laptop - same problem has occurred at the same time on both pc's and is worse in my sons user a/c, but occasionally affecting other win user a/c's..
here is the hijack this logfile from my user a/c but not sure if i need to also do another one from my sons a/c (?) or if these results apply across ht eboard to all win users on this laptop (?).
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:29:40, on 28/03/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal

Running processes:
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Win... Read more

A:cant open certain web pages - res://C:\Windows\system32\shdoclc.dll\navcancl.htm

Hi and welcome to TSF

I see that you have posted a question in our Virus/trojan/spyware forum I will
close this one.

Please follow their instructions.

BG

Read other 1 answers
RELEVANCY SCORE 108.8

Each time I go to a new web page i get the following message that internet explorer can not open the web page. I have included the following logfile from HiJack This scan. Thanks for reviewing this and any help you can give me.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:09:04 PM, on 4/3/2010Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18904)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\system32\svchost.exeC:\Program Files\Synaptics\SynTP\SynTPStart.exeC:\Program Files\HP\QuickPlay\QPService.exeC:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exeC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exeC:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exec:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exeC:\Program Files\Yahoo!\Search Protection\SearchProtection.exeC:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exeC:\Program Files\Winamp\wina... Read more

A:res://C:\Windows\system32\shdoclc.dll/navcancl.htm cant resolve this problem

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 108.8

Hi

We have 2 computers - comp1 = Desktop Windows Xp with various user accounts and comp 2 = Windows Vista with (almost) the same user accounts.

As of yesterday - not sure what triggerred it - IE is unstable on both computers in one user account only and displays this message :
cant open certain web pages - res://C:\Windows\system32\shdoclc.dll\navcancl.htm ; the user can occasionlly get to a webpage but it then disappears and the message is displayed at the top of the screen or it just won't load up. We do have monitoring software but have spoken to them and they confirm there are no settings in the account/s that should cause the computer/s to behave in this way.

As of today, comp 2 is unstable and routinely crashes after trying to instal and run GMER - just about managed to run DSS - system freezing up.

I have managed to run DSS and GMER on comp 1 - here are the results:

DSS



DDS (Ver_10-03-17.01) - NTFSx86
Run by T at 12:02:08.89 on 28/03/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.255.41 [GMT 1:00]

AV: ESET NOD32 Antivirus 4.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Nhksrv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekr... Read more

A:cant open certain web pages - res://C:\Windows\system32\shdoclc.dll\navcancl.htm

I am uploading with this post "2zipthis" attachment whichis the second part of the DSS for comp 2 - that's as fas I could get. I tried to reinstall and run GMER on comp2 but it was impossble. I also tried (first) to disable my anti virus ( same anti virus as on comp 1 which works fine) but it would not respond to the disable request and every time I tried ot run GMER it would start up in a window and then freeze the system completely.

Comp2 is the main comp I need ot sort out for my son's work as he has exams coming up and uses that comp - it is his user a/c that we are having the problems with. Thank you for reading all this.

PS - forgot to say that yesterday I did try to adjust start up settings and may have deleted some files/programmes in an attempt to stop messenger loading on start up - that didn't work anyway and the problems have been since then. I believe we have re-installation cds around somewhere but am so reluctant to get into that as we use these comps for work and have various programmes and settings that would be difficult to get back up and running properly - the wireless printing alone was a nightmare to set up and recently have wasted hours and hours on trying to set up another (apple) comp for wireless printing which just doesn't work + trying to sort out scans etc. for these issues now.

Read other 19 answers
RELEVANCY SCORE 108.8

i posted it earlier in IE forum but then thought it soud go here

cant open certain web pages - res://C:\Windows\system32\shdoclc.dll\navcancl.htm

--------------------------------------------------------------------------------

hi
can someone help me please because this problem means my son is unable to access internet and has exams coming up. today i tried to stop messenger on start up as it's a nuisance (still starts up anyway) and i'm not sure if that's what triggered this problem. we have 2 pc's - one desktop windows xp which is alos affected ( and I did not adjust settings on that one) and this one which is a windows vista laptop - same problem has occurred at the same time on both pc's and is worse in my sons user a/c, but occasionally affecting other win user a/c's..
here is the hijack this logfile from my user a/c but not sure if i need to also do another one from my sons a/c (?) or if these results apply across ht eboard to all win users on this laptop (?).
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:29:40, on 28/03/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal

Running processes:
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\system32\svchost.exe
C:\Program ... Read more

A:cant open certain web pages - res://C:\Windows\system32\shdoclc.dll\navcancl.htm

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 107.6

Hi.I've been reading up on how to fix this problem. It seems that the virus, if it is a virus, has targeted my favorite sites, i.e. my bank website, greylock.org, facebook, livesciene, and cnn (all of which I shouldn't probably be going to at work anyway, haha) and when I try to access them in IE, I get the "No Page to Display" with this (res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm) as the url - when I try them in Mozilla, they simply don't go anywhere, there is no action whatsoever.I went through yesterday, turned off my Start-up, updated my virus software, and started the computer in safe mode, then ran a full scan using Symantec. It didn't find anything. So, I've pasted my HiJackThis account below. Let me know if you can think of any other clever fixes - I've about exhausted my options. Thanks!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:31:41 PM, on 1/6/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Program Files�... Read more

A:A No Page Display based on res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm - can't fix

Hi.I've been reading up on how to fix this problem. It seems that the virus, if it is a virus, has targeted my favorite sites, i.e. my bank website, greylock.org, facebook, livesciene, and cnn (all of which I shouldn't probably be going to at work anyway, haha) and when I try to access them in IE, I get the "No Page to Display" with this (res://C:\WINDOWS\system32\shdoclc.dll/navcancl.htm) as the url - when I try them in Mozilla, they simply don't go anywhere, there is no action whatsoever.I went through yesterday, turned off my Start-up, updated my virus software, and started the computer in safe mode, then ran a full scan using Symantec. It didn't find anything. I've also run AdAware and it didn't find anything either.It's a tricky little devil.So, I've pasted my HiJackThis account below. Let me know if you can think of any other clever fixes - I've about exhausted my options. Thanks!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:57:57 AM, on 1/8/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Fil... Read more

Read other 3 answers
RELEVANCY SCORE 101.2

I have attached my log file ran in safe mode on a 2000 advanced server machine. Could someone please advise what entrys can be deleted and how to proceed? Thanks!!

Logfile of HijackThis v1.99.1
Scan saved at 5:20:35 PM, on 3/20/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\userinit.exe
C:\WINNT\Explorer.EXE
C:\Documents and Settings\Administrator\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://default.home/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://default.home/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O2 - BHO: ATDP Class - {E3D3AFEE-2172-4ef5-8509-1638AFFF0374} - C:\WINNT\atlassw.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ServUTrayIcon] C:\PROGRA~1\Serv-U\SERVUT~1.EXE
O4 - HKLM\..\Run: [Security iGuard] C:\Program Files\Security iGuard\Security iGuard.exe
O4 - Startup: eFax Live Menu 3.4.lnk = C:\Progra... Read more

A:Log file help! (res://C:\WINNT\system32\shdoclc.dll/navcancl.htm)

It best if we have a log scanned in normal mode please...

Please do NOT run Hijack This in a TEMPorary folder or on the Desktop. I recommend c:/program files/HJT/

Read other 3 answers
RELEVANCY SCORE 101.2

Hello, and thanks for helping a newbie out with this problem!

Whenever I launch Internet Explorer, the page comes up as: res://C:\WINNT\system32\shdoclc.dll/navcancl.htm and then it proceeds to go to my regular home page. I have ran many virus, adware, spyware programs but it didn't fix the problem until I heard about HiJackThis.

Thank you so much for your help!!

Here is my Hijackthis logfile:

Logfile of HijackThis v1.99.1
Scan saved at 5:30:36 PM, on 3/11/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\AMD\PowerNow!\GemServ.exe
C:\WINNT\system32\hidserv.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\CTHELPER.EXE
C:\WINNT\system32\PELMICED.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINNT\system32\ezSP_Px.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusche... Read more

A:Problem: res://C:\WINNT\system32\shdoclc.dll/navcancl.htm

bump

Not sure if this is the right place to help solve this problem. Please direct me to the correct forum if I posted this to the wrong place.

Thanks!

Read other 1 answers
RELEVANCY SCORE 100

I have a similar issue as prior persons have . Here is my Hijack log. Thanks in advance.

Logfile of HijackThis v1.99.0
Scan saved at 1:48:20 PM, on 2/5/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\ehome\ehSched.exe
C:\PROGRA~1\NORTON~1\NORTON~4\GHOSTS~2.EXE
C:\Program Files\Norton SystemWorks\Norton Antivirus\navapsvc.exe
C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
C:\Program Files\Norton SystemWorks\Norton Antivirus\SAVScan.exe
C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
C:\Program Files\Norton SystemWorks\Password Manager\AcctMgr.exe
C:\Program Files\Creative\S... Read more

A:Recurring IE Hijack (res://C:WINNT\system32\shdoclc.dll/navcancl.htm)

Welcome to TSF.

Please don't post your log in someone else's thread. I have split up your post and created a new thread for you.

Before you do anything else, please create a folder for HijackThis and put it in a permanent folder (like C:\HJT) instead of the Temp folder. This is required because HijackThis will create backups and we don't want them to be deleted.

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are following the procedures below.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that Display the contents of System Folders' is checked. Windows XP's search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that Search system folders, Search hidden files and folders, and Search subfolders are checked.

For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).

Turn o... Read more

Read other 3 answers
RELEVANCY SCORE 100

Hi ,
Can someone help me with this one to delete it , please ?
This is the name of my one res://C:\WINNT\System32\shdoclc.dll/navcancl.htm#C:\WINNT\Web\desktop.html .
Here is my log file . Thanks in advanced .


Logfile of HijackThis v1.99.1
Scan saved at 23:17:14, on 15/03/2005
Platform: Windows 2000 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\Explorer.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\rundll32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Medion\PowerCinema\My_TV\Agent.exe
C:\Program Files\Winamp\Winampa.exe
C:\WINNT\System32\RUNDLL32.EXE
C:\WINNT\SOUNDMAN.EXE
C:\WINNT\System32\internat.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINNT\system32\msiexec.exe
C:\Program Files... Read more

A:a new variant of the res://C:WINNT\system32\shdoclc.dll/navcancl.htm hijack

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are following the procedures below.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that 'Display the contents of system folders' is checked. Windows XP's search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that Search system folders, Search hidden files and folders, and Search subfolders are checked.

For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).

If you have a fast internet connection (broadband), run an online virus scan at TrendMicro. Just follow the instructions on the site to run the online scan. Otherwise, make sure your antivirus program has the latest definitions and run a full system scan.

Reboot into Safe Mode (hit F8 key until menu shows up). Make sure to close any open browsers. Run a scan in HijackThis.... Read more

Read other 16 answers
RELEVANCY SCORE 100

First thing - I admire you all for offering the support you do so freely. Very cool - and very deserving of donations.

My laptop browser (IE) got hijacked this evening (well, actually my EMPLOYER's laptop - oops). I have learned a lot over the past 6 and 1/2 hours - amazing what google, persistence, and fear can do for you :) And though I have made progress by gleaning many of your previous posts to people in my situation, the hijack recurs when I restart the browser. Anyway, here is info on the machine and what I have done:

Laptop - Win2k, McAfee Antivirus and Firewall always running.

The problem: IE homepage became http://default.home and went to a search site/ implemented an STool bar, introduced a Pop-up that crashed IE (needed to quit with task manager).

Steps I have taken:
1. Ran most thorough scans of HD with McAfee, Stinger, SpyBot, and AdAware. These identified a number of malicious zip files (e.g., Alexarelated1.zip, AvenueAlnc3.zip, DoubleClick.zip, DSOExploit.zip, Mediaplex1.zip, catalog.z, and about 8 others). AdAware got rid of the SToolbar.
2. Ran HijackThis and fixed two R0 - HKCU\... ..., start page =http://default.home entries and one O13 - WWW Prefix: http://ehttp.cc/? entry.

Result - upon opening the browser for the first time, I could get to google and mail.yahoo.com. But then I hit the Home icon and it redirects to res://C:\winnt\system32...shdoclc.dll/navcancl.htm. Then it directs me to a DIFFERENT homepage ("Your home ... Read more

A:Recurring IE Hijack (res://C:WINNT\system32\shdoclc.dll/navcancl.htm)

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are following the procedures below.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that Display the contents of System Folders' is checked. Windows XP's search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that Search system folders, Search hidden files and folders, and Search subfolders are checked.

For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).

Reboot into Safe Mode (hit F8 key until menu shows up). Make sure to close any open browsers. Go into HijackThis->Config->Misc. Tools->Open process manager. Select the following and click Kill process for each one if they are still listed (they shouldn't be - but double check it):

C:\Documents and Settings\DuerrJM\Start Menu\Programs\Startup\CLOCK.EXE

Run a scan... Read more

Read other 6 answers
RELEVANCY SCORE 99.2

I have a corporate laptop computer (no admin privileges) with Symantec firewall and virus cleaning software. Just got back from using the laptop in Korea. Seemed to have picked up some sort of virus or malware. Every time I open IE, I get the above page which tries to go to a spyware vendor (I think). I'm running Windows 2000. I just downloaded HJT software today, so I'm no expert at how to use it. My log looks like:
(apologies if I pasted this into the forum improperly)
Where do I go from here??

Logfile of HijackThis v1.99.1
Scan saved at 12:10:39 PM, on 1/17/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\Explorer.EXE
C:\WINNT\system32\ltmsg.exe
C:\WINNT\system32\atiptaxx.exe
C:\Program Files\Common Files\Roxio Shared\Project Selector\projselector.exe
C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
C:\Program Files\Altiris\AClient\AClntUsr.EXE
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\SYMANT~2\VPTray.exe
C:\Program Files\OLYMPUS\CAMEDIA Master 4.1\CM_camera.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Microsoft Office\Office\1033\msoffice.exe
C:\Lotus\Notes\NLNOTES.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Lotus\Notes\ntaskldr.EXE
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\hijackThis... Read more

A:how to eliminate 'res:C:\\WINNT\system32\shdoclc.dll/navcancl from my IE home page

Hi SoDakota, Welcome to TSF !!
I recommend you Subscribe to this thread (if you have not already done so) so you are notified of any replies via email
To do this :
Click Thread Tools, then click Subscribe to this Thread
Make sure it is set to Instant Notification by email, then click Subscribe

You may wish to print out a copy of these instructions to follow while you complete this procedure

Go to Start, Control Panel, Add/Remove Programs and Uninstall the following : (if present)

MyWebSearch

Do Not reboot if it asks

When finished uninstalling close Control Panel

I need you to download some programs to aide in our fix :Do Not Run Them Yet

Download SmitfraudFix? by S!Ri to your Desktop.

Download ATF (Atribune Temp File) Cleaner? by Atribune

Download and Install AVG Anti-Spyware? by Grisoft

Launch AVG Anti-Spyware, there should be an icon on your desktop double-click it.
The program will now go to the main screen
You will need to update AVG Anti-Spyware to the latest definition files.
On the main screen select the icon Update then select the Update now link
Next select the Start Update button, the update will start and a progress bar will show the updates being installed.
Close AVG Anti-Spyware

Reboot to Safe mode
Restart your computer and begin tapping the F8 key on your keyboard just before Windows starts to load
If done right a Windows Advanced Options menu will appear.
Select the Safe Mode option and press Enter

Double-cl... Read more

Read other 4 answers
RELEVANCY SCORE 93.6

Does anyone know how to fix this error I keep getting. I can be on line for 10 to 20 minutes then I just lose my ability to be on line. You get "page not found". I simply reboot and then it appears to clear for another 10 to 20 minuntes. I am on Verizon DSL and my connection is fine. I have XP service pack 2 installed with all patches updated. I read somewhere it might be a Norton issue so I have completey uninstalled NAV and NIS to see if that solved the problem. No help. I have Ad Aware, Spy Bot and the new MS Spyware beta all running with no spy problems. My system appears to run fine but really frustrating to have to reboot every 20 minutes to be on line.

I really appreciate any help or adivse or direction someone can steer me to.

Thanks, Steve

A:[resolved] res://c:\windows\system32\shdoclc.dll/dnserror.htm

What about an antivirus program? Try the online scan below and see if you find anything.

Read other 2 answers
RELEVANCY SCORE 78.8

i've been to all the tech help things for dell and stuff like that but they cant help, but whenever i sign online and try to go to a website i get a message like, "page not found" or "action cancelled", and instead of saying the url at the top i get a message that says "res://c:\windows\system32\shdoclc.dll\navcancl.htm#" with the url of the website following that, in the past i have been told that it is a problem with internet explorer, however i do not use internet explorer, i use AOL, but i then tried using internet explorer and the same thing happens, if anyone can offer some help it would be greatly appreciated...thank you
 

A:shdoclc.dll/navcancl.htm#

Read other 16 answers