Solved Res://C:\Windows\system32\shdoclc.dll/navcancl.htm Internet Explorer Issue

[dozzyo9080]

I should not be talking because the log isn't ready yet. It has been going for 3 1/2 hours now

 

[dozzyo9080]

Part of ESET 1

C:\Qoobox\Quarantine\C\Program Files\Search Toolbar\SearchToolbar.dll.vir Win32/Toolbar.Zugo application
C:\Users\Austin ROCKS\Downloads\Dr_Mario.zip probably a variant of Win32/Rbot.MOUFPZM trojan
C:\Users\Austin ROCKS\Downloads\WyzoSetup-3.6.4.exe Win32/Toolbar.Zugo application


G2G Sorry bye. This is ESET

 

[Broni]

What do you mean by "part 1"?

 

[Broni]

Are you still out there?

 

[Broni]

The issue seems to be resolved.

 

[dozzyo9080]

its back

It was good for a while but suddenly it just came back again today. The issue apparently was only temporarily solved.

 

[Broni]

Give me more details about it.

BTW, you never returned to this topic to run final steps....hmmm

 

[dozzyo9080]

It was working fine until i experienced some lag on flash stuff. Fixing that is not important. In my attempt to fix it, i tried to clear temp files with that program. But after that, pages were looking strange. So i decided to delete chrome and reinstall it. But then the original about:blank error came up again. The one at the beginning of this thread.

 

[Broni]

That's in IE?

 

[dozzyo9080]

I use chrome. The reason i said IE is because it showed a file location.Chrome says about:blank.

 

[dozzyo9080]

res://C:\Windows\system32\shdoclc.dll/navcancl.htm
for IE

 

[Broni]

Update MBAM, run FULL scan and post the log.

 

[dozzyo9080]

will it bring the same results with a flash scan?

 

[Broni]

What do you mean by flash scan?

 

[dozzyo9080]

Never Mind. Its a reg and memory scanner in newer version of MBAM. I thought it was a quick, full scan

I'm still trying to leave the computer on for it to complete but it is very hard to leave the computer running for so long.

 

[dozzyo9080]

scan is not looking very good...

 

[Broni]

What scan?

 

[dozzyo9080]

Full scan.

 

[Broni]

Please reply using full sentence to let me know what doesn't look good.
Unfortunately I'm not there, so I can't see what you see.

 

[dozzyo9080]

mbam 7/24

Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Database version: 7265

Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421

7/24/2011 7:59:53 PM
mbam-log-2011-07-24 (19-59-09).txt

Scan type: Full scan (C:\|D:\|F:\|G:\|)
Objects scanned: 206976
Time elapsed: 4 hour(s), 41 minute(s), 10 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 4
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{0BDA0769-FD72-49F4-9266-E1FB004F4D8F} (PUP.Dealio.TB) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0BDA0769-FD72-49F4-9266-E1FB004F4D8F} (PUP.Dealio.TB) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{0BDA0769-FD72-49F4-9266-E1FB004F4D8F} (PUP.Dealio.TB) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0BDA0769-FD72-49F4-9266-E1FB004F4D8F} (PUP.Dealio.TB) -> No action taken.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{0BDA0769-FD72-49F4-9266-E1FB004F4D8F} (PUP.Dealio.TB) -> Value: {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{0BDA0769-FD72-49F4-9266-E1FB004F4D8F} (PUP.Dealio.TB) -> Value: {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} -> No action taken.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\program files\iobit toolbar\IE\4.5\iobittoolbarie.dll (PUP.Dealio.TB) -> No action taken.

 

[dozzyo9080]

I did not finish the scan because my MBAM can not stay responsive for that long period of time it takes to finish the full scan.

 

[Broni]

You have to re-run it anyway because the log says "No action taken" after each line.
Re-run it, FIX all issues and post new log.

 

[dozzyo9080]

I apologize, i created that log before I deleted those files because I thought it would not show up if I did. So all should be counted as deleted.

 

[Broni]

I'd like to see fresh log anyway.

How is computer doing?

 

[dozzyo9080]

its good. it will be very complicated to do such scan. i can not leave my computer running that long again. running while i am sleeping will be problems energy-wise.