ITsVISTA
Information that makes life easier when it comes to installing, managing, and using Windows Vista.
Start About FAQ Blogroll Shop

KB931768 ‘navcancl’ error crippling IE7 for some Vista users

IE7After posting a link to the KB931768 update, a user responded that it was causing problems on their machine. Today, another user confirmed that they too are having problems. A quick Google shows that they are not alone. What’s the problem, and how do you fix it?

The first panicked message on my site was:

I can not open any webpage nor any file the box tell me for security this file can not open
name navcancl
type unknown file 2.64kb
from ieFrame.dll

This was followed by:

I got exactly the same problem with the KB931768 update.
When i remove it , IE works fine but when it is reinstalled, it always displayed the window that A.S. mentions

After asking Google about navcancl I found a couple forum threads with a number of other users that are suffering the same problem. It appears that after users install the KB931768 update, when they try to open IE7, “IE7 opens and then quickley closes …a windows pops up asking if I want to save file NAVCANCL size 2.64KB From IEFRAME.DLL”.
navcanclIE7 Bug
(The first image is from XPSP2, the second from a French version of Vista)

Users are reporting that even with a blank Home Page and all add-ons disabled, they are still seeing the problem. At least one user has noted that it goes away when the Phishing Filter is turned off. Based on that, they suggest this temporary solution:

  1. Start IE7 using Start->Run iexplore.exe -nohome -extoff
  2. Right click on the toolbar area and tick Menu Bar if its disabled
  3. Tools->Options->Advanced->Security->Disable Phishing Filter

Another solution appears to be disabling Protection Mode (IE Options->Securities->disable Protection Mode). Doing a System Restore to a pre-update point works, as does uninstalling the update.

It would appear that this is related to a cross-site scripting vulnerability that this update fixes. By turning off the Phishing Filter, users are likely just hiding the underlying problem, that it would seem is caused by their machine being a victim of an exploit. I have not seen any mention thus far of a solution or ‘fix’ to this issue beyond the temporary measures that allow IE7 to at least open. If you’re aware of a fix for this issue, certainly let us know!

Get notified of new posts for FREE via RSS or E-mail

Subscribe to ITsVISTA!

Comments

  • IT-Expert

    May 11, 2007 at 2:54 am

    We have a lot of vista installations here, where the problem is exactly the same. It seems to be related to the “temporary internet files” folder beeing in a non-standard folder. If the phishing filter service is temporary unavailable, the problem seems to happen more often. Since we always have two partitions (one system, one data) all “temporary internet files” folders are in an non-standard location.
    Possible solution:
    - move temporary internet files to the standard folder (I certainly won’t do this on every machine in our network) or
    - disable phishing filter in IE7 or
    - start IE7 with admin priviledges;

    conclusion: catastophic QA Microsoft;

  • Jenny

    May 11, 2007 at 1:49 pm

    Same update made my IE7 just think i was not online,windows xp home.I just uninstalled the update and now okay again.No point in giving me so much security i can’t get online at all !!

  • JimB

    May 11, 2007 at 1:54 pm

    I am haveing the same problem with Win XP Pro, but only on some computers. I have been un-installing the update, but know that is no solution. We need MS to fix it.

  • luc

    May 12, 2007 at 3:19 am

    No problems here.

  • Jai

    May 12, 2007 at 3:28 am

    Thank God for Firefox!

  • James Snell

    May 12, 2007 at 11:31 am

    I had exactly the same problem, running Vista Home Premium. After spending 45 minutes on the phone with HP, the only remedy they could find was to do a system restore to before the latest set of 9 updates. Later I installed all but the KB931768 update, and everything was OK. I do have the Temporary Internet Files at a non-standard location. Offhand I don’t remember what the standard location is, but I’ll find out and move it to there, then install the update and see whether that fixed the problem. One would think that Microsoft would help with this by updating the KB article, but after talking with MS tech support twice and searching the web I haven’t found any trace that MS is even acknowledging the issue, let alone working on a fix. Typical.

  • Joe

    May 12, 2007 at 11:52 am

    I’ve seen others mention the temporary files location as well. The standard location in Vista is:
    “C:\Users\%YOUR_USER_NAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files”
    In Windows XP it is:
    “C:\Documents and Settings\username\Local Settings\Temporary Internet Files”

    Everyone please respond if you are having this issue, if you moved your temporary internet file folder to a different location, and if moving it back resolved the issue. Thanks!

  • Joe

    May 12, 2007 at 12:13 pm

    I don’t see any trace of MS acknowledging the error in their forums. I tried changing my temporary internet location to see if I could reproduce the error, but IE7 still works for me, so there may be more to it than that.

  • Russ

    May 12, 2007 at 12:25 pm

    MSDN IE Blog acknowledges that Microsoft is reviewing these error reports: http://blogs.msdn.com/ie/archive/2007/05/08/ie-may-2007-security-update-available-now.aspx

  • Jenny

    May 12, 2007 at 2:57 pm

    Hi
    In XP Home it seemed to mean my “MTU not found” according to my modem diagnostic tool . I did not notice if temp internet files had moved.
    Hope this is of help to someone in resolving the issue.

  • Joe

    May 12, 2007 at 3:27 pm

    Thanks Russ. Though Microsoft doesn’t mention the issue specifically, they do say “Thank you all for your feedback! The IE Team is investigating your reports.” after a number of comments with problems, including the navcancl issue, so someone on the IE Team is at least aware of the problem. There are good reasons to want to move your temporary internet directory to a different location (backup considerations for one) so hopefully users won’t be forced to simply take the default location and like it.

  • Russ

    May 12, 2007 at 6:17 pm

    I agree Joe. Unfortunately, I am using the default setting for the temp file location and do not have the phishing filter enabled…obviously this was a very poor example of regression testing by the IE team. I fear they have become so hypersensitive to reports of security problems that they are releasing bad fixes before they’re fully tested.

  • Dell

    May 13, 2007 at 8:24 pm

    Interestingly I am having this problem on one of my user profiles (XPHome) but not another. When I look in my “add or remove pgms” for the particular update everyone is mentioning (KB931768), I don’t even see it there to uninstall it. Switching off the phishing filter as suggested makes no difference. However, in my case, restoring my temp internet folder to the (standard?) location, as in the post above, seems to have solved the issue … Even allowing me to then move it to yet another location without seeming to reintroduce the problem.

  • Chris

    May 14, 2007 at 1:20 am

    I’ve installed & so far so good

  • Rich

    May 14, 2007 at 8:06 am

    Running XP Pro SP2. Temp files are in the default location. The only temp file location abnormality I see is a ‘.’ in my username folder.
    ex. C:\Documents and Settings\username.domain\Local Settings\Temporary Internet Files

    Disabling the phishing filter provided a temporary fix. Way to go MS.

  • Jonathan

    May 14, 2007 at 9:27 am

    I have found this issue comming up at random on a few users pc’s, usually turning off “protected mode” in ie settings fixes the issue… lemme know if it helps.

    also another work around (IN VISTA ONLY) try elevating the IE before launch (r.click run as admin) this is known to fix to… sometimes

  • Jonathan

    May 14, 2007 at 9:59 am

    I just found out that it was profile related, opened another (new) user profile.. and the issue was gone… chalk another one up to profile corruption… so, build a new user profile and this issue shouldn’t plague you anymore…
    Have a fun one. .. hope this helps

  • micfly

    May 15, 2007 at 6:11 am

    KB931768 update

    I was getting:

    file download security warning
    do you want to save this file?
    name: dnserror
    type: unknown file type, 6.38kb
    from: ieframe.dll
    save cancel

    Killed my internet connection and outlook mail server connection. Uninstalled the update and that fixed the problem.
    My temporary internet files where on another partition. I moved them back to the default location and reinstalled the update. So far it’s working now. This is Windows Vista Home Premium.

  • Joe

    May 16, 2007 at 9:44 pm

    Microsoft has responded. See http://itsvista.com/2007/05/microsoft-responds-to-ie7-navcancl-issue/ for details.

  • James Snell

    May 16, 2007 at 11:07 pm

    I’m glad Microsoft posted KB937409 and the reference to it in KB931768. I’m not glad that it took Microsoft over a week to respond to this issue. KB937409 describes 2 workarounds, but the 1st one defeats the purpose of IE’s “Move Folder” feature, and the 2nd one either isn’t doable on some versions of Vista or is missing a key piece of info (getting the Security tab in the folder Properties dialog). Also the article says to use these workarounds at the user’s risk. So Microsoft still needs to release another update that fixes the bug in MS07-027 (KB931768).

    Workaround Method 1 (move the TIF folder back to its default location) worked, but it’s highly unsatisfactory for users who moved the TIF folder for a good reason, such as wanting to prevent it from being backed up automatically.

    Workaround Method 2 (grant permissions to the TIF folder) I couldn’t even complete, because step 6 refers to the Security tab of the Properties dialog for the TIF folder, but on my computer running Vista Home Premium no Security tab is displayed, only the General tab. (Note that between steps 4 and 5 there are two items missing, namely select the TIF folder, and then if it’s not displayed, go to Tools > Folder Options > View tab and select Show hidden files and folders. Perhaps there’s another setting somewhere that displays the Security tab in the Properties dialog for a folder, but I couldn’t find it. Plainly Microsoft failed to test the instructions adequately before posting them, just as they failed to test the update adequately before releasing it.)

  • GrrafNig

    Jun 14, 2007 at 8:58 pm

    I was able to get around the problem of not having a Security tab on the TIF by creating the folder in the desired location, setting the security as detailed in Method 2, THEN moving the folder. The 1st attempt caused IE to lock up, but after a logoff/on and changing the setting WITHOUT IE running, it was successful and I was able to turn Protected Mode back on. Clearly there is an attribute for the folder (System) that prevents users from seeing the security tab. I was able to remove the system atttib iw “-h -s” (it failed with just “-s”) and see all tabs, I was just not able to turn te system attrib back on. IE still appears to work OK though.

  • ie7 errors

    Jun 19, 2008 at 4:08 am

    [...] [...]

Leave a Comment