Can't access a website

[vincentvgo]

I cannot access a certain website that after being assured by the webmaster that it is up and running. It is the only website that I can't access. Everything else is OK. Everytime I try to access this site I get " res://G:\Windows\System32\shdoclc.dll/navcancl.htm#http://www.pathcom.com/~rink " in the address bar of my browser and then a window pops up as if I should be downloading a file. Any ideas? Is this a registry bug or something? I don't understand why it is just this site.Thanks Vincentvgo

[renegade600]

In spite of what the webmaster says, there seems to be problems with the site. I can access it but there are alot of red x's. I did not get the g drive stuff but As far as that goes, that seems to be them also, not you. Personally with those type of errors, I would avoid that site for a while.

[AnnMarie]

Hi vincentvgo - the page loads OK for me. If you are still having problems, go here (http://www.spywareinfo.com/~merijn/files/beta/hijackthis.zip) and download and run a scan with Hijack This. Most of the files listed will be harmless and/or required so do not make any changes, just click on Save Log, copy it and post it back in this thread.

[vincentvgo]

Hi vincentvgo - the page loads OK for me. If you are still having problems, go here (http://www.spywareinfo.com/~merijn/files/beta/hijackthis.zip) and download and run a scan with Hijack This. Most of the files listed will be harmless and/or required so do not make any changes, just click on Save Log, copy it and post it back in this thread.
Logfile of HijackThis v1.97.2
Scan saved at 9:44:15 PM, on 10/17/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\system32\spoolsv.exe
G:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
G:\Program Files\Norton AntiVirus\navapsvc.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\wanmpsvc.exe
G:\WINDOWS\Explorer.EXE
G:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb0 4.exe
G:\WINDOWS\System32\hphmon03.exe
G:\Program Files\Common Files\Symantec Shared\ccApp.exe
G:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
G:\WINDOWS\System32\devldr32.exe
G:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
G:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
G:\WINDOWS\System32\HPHipm09.exe
G:\Program Files\Messenger\msmsgs.exe
G:\Program Files\CursorXP\CursorXP.exe
G:\Program Files\America Online 8.0\aol.exe
G:\Program Files\America Online 8.0\waol.exe
G:\Documents and Settings\Doug Hudson\My Documents\HijackThis.exe

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - G:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - G:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - G:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [RealTray] G:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [WorksFUD] G:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] G:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] G:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] G:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb0 4.exe
O4 - HKLM\..\Run: [HPHmon03] G:\WINDOWS\System32\hphmon03.exe
O4 - HKLM\..\Run: [ccApp] "G:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "G:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [AdaptecDirectCD] "G:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKCU\..\Run: [CursorXP] G:\Program Files\CursorXP\CursorXP.exe
O4 - Global Startup: Acrobat Assistant.lnk = G:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = G:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: America Online 8.0 Tray Icon.lnk = G:\Program Files\America Online 8.0\aoltray.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://G:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Cosmi Popup Blocker (HKLM)
O9 - Extra 'Tools' menuitem: Cosmi Popup Blocker (HKLM)
O9 - Extra button: Real.com (HKLM)
O12 - Plugin for .spop: G:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{353F70EF-F20E-4615-8298-9A87A915600D}: NameServer = 64.12.105.134

[AnnMarie]

Have you changed your ISP or connection method since you posted your last log vincentvgo?

If not, run Hijack This again and this time, select the below entry and click on "Fix Selected". Reboot afterwards.

O17 - HKLM\System\CCS\Services\Tcpip\..\{353F70EF-F20E-4615-8298-9A87A915600D}: NameServer = 64.12.105.134

Let us know if this helps.

[vincentvgo]

Have you changed your ISP or connection method since you posted your last log vincentvgo?

If not, run Hijack This again and this time, select the below entry and click on "Fix Selected". Reboot afterwards.

O17 - HKLM\System\CCS\Services\Tcpip\..\{353F70EF-F20E-4615-8298-9A87A915600D}: NameServer = 64.12.105.134

Let us know if this helps.

I ran HiJack This again and that line was no longer in the log. I didn't delete it but my AntiVirus program runs late Friday. That is the only way I could think that it disappeared. Anyway since the line was already gone I just rebooted and I got on the website, but then I left the site and when I went back I got the same bad results. So I went to HiJack ,ran it again and the line was back, I deleted it ,rebooted and still couldn't access the site. Is this weird or what?

[AnnMarie]

Yep, it's weird :D I am not sure what the problem is vincent however just to be on the safe side, if your problem disappeared after running your AV, disable Norton via msconfig and then go here (http://www.ravantivirus.com/scan/). RAV generates a log, post it back here.

[vincentvgo]

Yep, it's weird :D I am not sure what the problem is vincent however just to be on the safe side, if your problem disappeared after running your AV, disable Norton via msconfig and then go here (http://www.ravantivirus.com/scan/). RAV generates a log, post it back here.

I went to msconfig, is what I want to disable in the services tab? Nothing there from Norton but Symantec had an "events manager" Is this it? Sould I go ahead and generaate that log? Thanks for being patient with me.

[AnnMarie]

Hi again vincent - when you wish to disable a program, at startup, you look in the Startup Tab. Sorry, I should have posted full instructions but leave disabling Norton and scanning with RAV for now.

How do you connect, dialup, cable or DSL?

[vincentvgo]

Hi again vincent - when you wish to disable a program, at startup, you look in the Startup Tab. Sorry, I should have posted full instructions but leave disabling Norton and scanning with RAV for now.

How do you connect, dialup, cable or DSL?

I am dial-up and use AOL. Let me tell you this, the problem site for me is www.pathcom.com/~rink/ and the webmaster says that should open the homepage for me but doesn't, but I can access different pages of the that website by typing the URL of that particular page ie, www.pathcom.com/~rink/Colorado.html I can go to most every page in the site doing this but I can't open that homepage and there are no back links to the homepage on any of the pages.

[renegade600]

You use AOL??? That could make a difference. Are you sure aol is not blocking it. I have not used it in years but once there were pages they blocked for one reason or another. You could alway get on the sites but usually through an indirect path.

Also AOL handles graphics and some scripts differently There could be something on that page that could be causing it problems.

Hopefully someone here uses aol and can give you more up-to-date info.

[AnnMarie]

Hi again vincentvgo - I cannot see anything about a homepage on either of those links either. The first link refers to NFHL and the second link, Colorado Avalanche. Is this what you see too?

Are you trying to access Pathway Communications home page?

[vincentvgo]

Hi again vincentvgo - I cannot see anything about a homepage on either of those links either. The first link refers to NFHL and the second link, Colorado Avalanche. Is this what you see too?

Are you trying to access Pathway Communications home page?

OK Without rhyme or reason and I don't know why, but my issue seems to have resolved itself. Everything is back to normal. So anyway I would like to thank those who tried to help, especially you AnnMarie. This is a great site for computer help! Thanks again Vincent

[AnnMarie]

That's good news vincent! Thanks for updating us and you are very welcome. :D