Forum Moderators: phranque
[Sat Oct 7 16:58:04 2006] [error] [client IP removed] File does not exist: /home/domain/public_html/directory/refresh.gif
[Sat Oct 7 16:58:04 2006] [error] [client IP removed] File does not exist: /home/domain/public_html/directory/pagerror.gif
The files noted in the error log are associated with the Windows system file shdoclc.dll (Shell Document Object and Control library) which is a resource-only library that is used by Internet Explorer to store localized items such as menus, dialog boxes, and strings and is located at "res://C:\WINDOWS\system32\shdoclc.dll[\refresh.gif or \pagerror.gif]" on Windows PC's, according to Microsoft.
Does anyone know why Internet Explorer would look for refresh.gif and pagerror.gif on my web site (the server is Linux with Apache 1.3.x)? The shdoclc.dll file is targeted by some trojans (specifically page stealers) and some virii on Windows PC's. In this case the IP's from the error log belong to site visitors with memberships. I used to see this log entry rarely but now it's almost daily. Has anyone else noticed this?
A lot of web sites mention IE and shdoclc.dll exploits, SSL issues in older versions of IE, and Windows server issues. I didn't find any information where IE may cause this entry in the error log when Apache is installed on a Linux server. I tested my site with IE on WinXP SP2 and was unable to cause the error log entry, although I don't use the default cookie settings in IE, they are set to accept from originating site and authentication but denied from 3rd party. Could it be the new IE v7 beta causing the sudden increase in these error log entries? Does anyone know if some large ISP (like AOL) recently issued new internet software that includes a modified version of IE? I personally haven't used IE since I discovered Firefox a few years ago and I'm better off for it. I am curious if anyone knows what would cause this error log entry so often on a Linux server or if there is some "bad" software out there I should be aware of.
Does anyone know if some large ISP (like AOL) recently issued new internet software that includes a modified version of IE?
See this thread: Yahoo releasing IE 7 before MSN? [webmasterworld.com]