Hi,
My friend Lydia is having problems running IE. She gets res://C:\WINDOWS\system32\shdoclc.dll/dnserror.htm whenever she tries to use it. She's running XP SP2 and has no problems with any other internet apps. I suspected some sort of browser hijack, so I had her run HijackThis. Here's the log: any suspects?

Logfile of HijackThis v1.99.1
Scan saved at 1:03:53 AM, on 4/4/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MDC\AEGIS Client\mgr8021x.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\system32\msn32.exe
C:\WINDOWS\system32\msldc.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Documents and Settings\Taren\My Documents\download\lydiaismissing\hijackthis.exe

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [Windows update] msn32.exe
O4 - HKLM\..\Run: [Microsoft system listing] msldc.exe
O4 - HKLM\..\Run: [MicroSoft Data Transfer Console] msdtc.exe
O4 - HKLM\..\RunServices: [Windows update] msn32.exe
O4 - HKLM\..\RunServices: [Microsoft system listing] msldc.exe
O4 - HKLM\..\RunServices: [MicroSoft Data Transfer Console] msdtc.exe
O4 - HKCU\..\Run: [Microsoft system listing] msldc.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [MicroSoft Data Transfer Console] msdtc.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1112213391828
O20 - Winlogon Notify: mdc - C:\WINDOWS\SYSTEM32\notification.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe



Thanks
eBolla


PS. I get fresh baked cookies if i fix the problem

I Too Have Windows Xp With Sp 1, 2, And 3 Loaded On My System..i Had Loaded Hijack This On The Puter But Have Found I Do Not Like It.....do You Have A Firewall? If Not--get One. I Now Run Cw Shredder And Ad-aware. I Too Have Had Trouble With The Hijacker And Have Turned Them Into The Fbi.....good Luck

Windows XP only has two service packs.

ebolla1010,
Close all browser windows, restart Hijack This and put a checkmark next to the following entries:

O4 - HKLM\..\Run: [Windows update] msn32.exe
O4 - HKLM\..\Run: [Microsoft system listing] msldc.exe
O4 - HKLM\..\Run: [MicroSoft Data Transfer Console] msdtc.exe
O4 - HKLM\..\RunServices: [Windows update] msn32.exe
O4 - HKLM\..\RunServices: [Microsoft system listing] msldc.exe
O4 - HKLM\..\RunServices: [MicroSoft Data Transfer Console] msdtc.exe
O4 - HKCU\..\Run: [Microsoft system listing] msldc.exe
O4 - HKCU\..\Run: [MicroSoft Data Transfer Console] msdtc.exe
O20 - Winlogon Notify: mdc - C:\WINDOWS\SYSTEM32\notification.dll

Click Fix Checked

Then boot into Safe Mode and ensure that you are showing Hidden Files and Folders.

Delete the following files and folders:
C:\WINDOWS\system32\msn32.exe
C:\WINDOWS\system32\msldc.exe
C:\WINDOWS\SYSTEM32\notification.dll

Reboot and post a fresh log