Ad-Aware came up with this on my last scan, and i'm wondering what to do next as I dont think deleting or quarantining the file will be a good idea since the file is an important system file.

Any ideas anyone.


Adware.Agent Object Recognized!
Type : Process
Data : SHDOCVW.dll
TAC Rating : 5
Category : Adware
Comment : main_uninstaller.exe.dmp
Object : C:\WINDOWS\System32\
FileVersion : 6.00.2750.167
ProductVersion : 6.00.2750.167
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Shell Doc Object and Control Library
InternalName : SHDOCVW.DLL
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : SHDOCVW.DLL

Warning! Adware.Agent Object found in memory(C:\WINDOWS\System32\SHDOCVW.dll)


0 Possible New Malware 0 Object Recognized!
Type : File
Data : SHDOCVW.DLL
TAC Rating : 0
Category : Data Miner
Comment :
Object : C:\WINDOWS\system32\dllcache\
FileVersion : 6.00.2750.167
ProductVersion : 6.00.2750.167
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Shell Doc Object and Control Library
InternalName : SHDOCVW.DLL
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : SHDOCVW.DLL


0 Possible New Malware 0 Object Recognized!
Type : File
Data : shdocvw.bak
TAC Rating : 0
Category : Data Miner
Comment :
Object : C:\WINDOWS\system32\
FileVersion : 6.00.2750.167
ProductVersion : 6.00.2750.167
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Shell Doc Object and Control Library
InternalName : SHDOCVW.DLL
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : SHDOCVW.DLL

Very strange thing has happened.

After re-starting windows (without quarantining or deleting files) i did another scan, and it didnt find anything other than cookies and MRU lists. No Adware or potential malware.

Could it be that this occurs after a definitions update? As I scanned straight after an update.

I'll keep my eye out here; I've the identical problem. I select "remove selections" and the "deleting selections" bar freezes for an indefinite period...

I have just had the same thing happen to my computer. Adware is not fixing the problem in shdocvw.dll

Every time I run adware, it shows a problem with that file. The delete bar freezes for an indefinite period.
Anyone find a fix for this problem? Also it creates a file named shdocvw.bak
or that was the original file before it was altered.

Had the same problem since the last update from Lavasoft earlier this week. If you exclude the SHDOCVW.DLL from the list of objects for removal it runs OK. Starting to suspect its something to do with the recent update rather than a real problem. If you search elsewhere there are indications that this DLL is a genuine requirement for use with visual basic.

Exactly the same problem here,ever since the last update.

Adware.Agent in SHDOCVW.dll won't remove it and removal bar freezes.Need to reboot.

I'm having a similar problem. Updated Adaware SE definitions, then this "0 Possibile malware 0" and "adware.agent" are detected. However, my problem file is system32\shell32.dll instead of your SHDOCVW.dll. When they are found, an RPC window pops up and tries to shut down the system.
I have formatted a number of times now. Fresh install of windows, only AVG and Adaware installed. Not even a network connection. Spyware comes back every time.

My post can be found here.

THIS IS AN IMPORTANT PROBLEM AND NOONE IS HELPING ABOUT THIS SERIOUS PROBLEM , I THINK !!!

shell32.dll seems to be a virus material but it mustn't be.

If someone really can find a serious solution , please send...
Where are the admins ???

Help please !!!

It looks like this is only happening once you update to the latest definitions.
Are the latest definitions (SE1R181 -16th 07 2007) falsely detecting something which is not a problem, or is it possible that something maliscious is actually being included in the download? I have now formatted a hundred times and am now using Adaware with out of date definitions, since I know the moment I press that update button and scan, I'm going to be "infected" again.

Also, would anyone know where I can get older definitions? I downloaded 3 different definitions from this site, only to find out they each appear to be exactly the same file, which Adaware detects as SE1R181. Obviously no good.

Hope this is being looked into.

I have the same problem. I think the SE1R181 - 16th July update is creating false positives.
Each time I scan my PC, Adaware detects 14 pieces of 'Critical Spyware' all of which are named SHLWAPI.DLL [C:\WINDOWS\SYSTEM\SHLWAPI.DLL].
SHLWAPI.DLL is a valid Microsoft Utility Library which as far as I know should not be quarantined or deleted.

When It was first detected by Adaware [Before investigation], I did try to get rid of it and the 'Delete Bar' froze - same as with you guys.

I've now gone back to the old definition file [09.07.07]* and I don't have a problem. I'm going to wait for the next upgrade and see what happens.
I've scanned my PC with other anti-spyware and antivirus software and it appears to be clean, so I'm not unduly worried at the moment [famous last words!].

*To go back to 09.07.07 definition file:

My Computer > C:Drive > Program Files > Lavasoft > Adaware SE Personal > There are two definition files - One is named 'defs.ref' and the other is named 'defs.ref.old'.
If you delete the 'defs.ref' file and then rename the 'defs.ref.old' to 'defs.ref' you will be back to 09.07.07.

Hope this helps!

Important note:
Anyone using the above tutorial to change any PC security settings and utilize out of date 'Spyware Definition Files' does so at their own risk... I don't have a Lawyer!

Hello,

This issue is explained here:
Shdocvw.dll
http://www.lavasoftsupport.com/index.php?showtopic=11076

The latest Ad-Aware reference file update should correct the problem.

These updates issued today:
0010.0000 is now available, new definition file for Ad-Aware 2007.
SE1R182 23.07.2007 is now available, new definition file for Ad-Aware SE.

Let us know if that resolves the problem?

Hi everyone,

I had adware.agent show up after each scan and every time I tried to delete it, the Delete bar froze.

As another thread in this forum made reference to the module shdocvw.dll ,I suspected that this file was infected.

I compared the size of shdocvw.dll on my other PC and there was a 2 block difference.

I copied over a fresh version from the other PC and ran the scan twice again and each time, adware.agent did not show up as present.

As shdocvw.dll is a locked file whenever windows is running, you need to put the fresh copy somewhere else on the infected PC and then use a standalone bootable DOS diskette to copy shdocvw.dll to its proper location in C:\windows\system\.


Was this file really corrupted or was the latest definition file SE1R181 from lavasoft creating a false positive?


Hope this helps.

I ran the usual scan this afternoon with the same problem resulting. Then updated with the latest file from Lavasoft and ran it again immediately after the update and the problem has disappeared.

Glad to here that version SE1R182 solved the problem for you.

I was using the previous version and as I mentionned above, my solution came from replacing the shdocvw.dll file with a fresh copy.

Whatever works.

Loaded the new definition file [SE1R182 23.07.2007] and the problem has disappeared for me too, which is a relief!

In my opinion Ad-Aware is the best Anti-spyware software out there. On numerous occasions it's detected Spyware and other 'nasties' [and dealt with them] that my other AntiVirus/Spyware software has missed.

Thanks to all, for help and advice.

Glad to hear that resolved the problem Thanks for letting us know.

I'll go ahead and archive this topic in the "Resolved" section (read only)

If you should have any further issues, please feel free to start a new topic.