shdoclc.dll/preview.dlg script error

I have gone thru all steps as indicated on the read me first page with no luck.However, in the process found the following: look2me virus, trojan dialer CE, trojan dialer BH , trojan .zorroA and windows/downloadedprogramfiles/conflict2/online.exe.

Any help would be appreciated. thanks

 

If you are having reports of problems related to a Look2Me VX2 infection and cannot fix it with normal scanning tools. Follow the steps below.

Download L2MeFix Tool and save it where you will be able to find it.

Please print out these instructions now or save locally so that you can operate with All Browser Windows CLOSED.

Exit Browsers now before continuing

Please move the L2MeFix Tool to your Desktop and DoubleClick l2mfix.exe. Click the Install button to extract the files and follow the prompts, then open the newly added l2mfix Folder on your Desktop. DoubleClick l2mfix.bat and Type 1 and ENTER to select Option #1 for Run Find Log . Allow it as much time as it needs to run until NotePad opens with a log. Save this log. You will need to post this log back here later when you come back.

Next DoubleClick l2mfix.bat and type 2 and ENTER to select option #2 for Run Fix. Then, press any key to Reboot your machine.

Your computer will go crazy for a bit, but just let it run. It should eventually spit out a log in Notepad. Please also attach this log to your next message.

Now open your browser and come back here and post the above two logs as attachments to your message. Also indicate your current status.


NOTE: Please do not run any other options or files in the l2mfix Folder!

After doing ALL of the above make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

Downloading, Installing, and Running HijackThis

 

Able to move icon to desktop but after opening the I2mfix folder there is no I2mfix.bat. After double clicking on the I2mfix folder it states that "no application is associated with the specified file". create an association by using the explorer." I believe notepad was deleted somehow when I had the about blank hijack sometime ago. I think the next step would have to be restoring notepad. How might I do that?

 

Post a HijackThis log as an attachment.

 

Here is the log. thanks

 

you may have had problems reading prior attachment, sorry.

 

Uninstall SpyBlocks/eBlocs.com this is a rogue Ant-Spyware application.

See http://www.spywarewarrior.com/rogue_anti-spyware.htm it's about a quarter of the way down the page.

You should have nothing in the Internet Explorer Trusted Zone. Remove these:

http://personal.fidelity.com
http://access.fidelity.com
http://www.ebay.com
http://*.ebay.com
disney.go.com
http://www.skillmark.com
http://www.keirsuccess.com
http://www.4allmemory.com
​

Have HijackThis fix the following:

Reboot and post a fresh HijackThis.

 

Here is new log.

 

Download
- Pocket Killbox

Make sure you have done the following:
How to view hidden, system files & folders!

Now scan and have HJT Fix the following:

Now run Pocket Killbox:
Choose Tools > Delete Temp Files and click OK.

Run Killbox.exe. Paste the below filenames into KILL BOX one at a time. Check mark the box that says "Delete on Reboot" and checkmark the box "Unregister DLL" (If available) Click the RED X and it will ask you to confirm the file for deletion…say YES and when the next box opens prompting you to reboot now...click NO...and proceed with the next file. Once you get to the last one click YES and it will reboot. Note many of the file list below may not exist but we need to check for them anyway.

If Killbox does not reboot or you get a Pending Operations type error message just reboot your PC yourself.

Now boot into SAFE MODE open Windows Explorer navigate to and DELETE the following:

Now run CCleaner

Now reboot in normal mode and post a new HJT log; and tell us how things are working.

 

Here is the latest log. IE script error still present when printing. I noticed Spyblocs files remain in c:/progarm files. Is that OK?

 

Your HijackThis log is clean. You can delete any reference to SpyBlock that is still in C:\Program Files. What is the error message, word for word?

 

When printing from IE:

An error has occurred in the script on this page.
Line 639
Char 1
Error: Invalid Argument
Code 0
URL res://C:\windows\system\shdoclc.dll/preview.dlg

Do you want to continue running scripts on this page? Yesor NO

 

You either have a problem with Java or ActiveX; one or the other if not both. You can try uninstalling your Java and then reinstalling it, reset your ActiveX controls, or do a repair install of Internet Explorer.

This is an issue for the Software Forum. If you post there you will get help fairly quickly.

 

Thanks for your help in identifying the problem. Is there a way to move these threads directly into the Software Forum?

 

Yes, threads can be moved. However, we like to keep Spyware threads with solutions in this forum. If you start a new thread in Software just reference this thread with a link.