I cannot access any secure website. I can't access windows update or the updates for zone alarms or avast. I ran a virus check on house call's website and then on symantec's. They both found 0 virus. I ran spychecker search and destroy and ad-aware and eliminated the spyware that is detected. I am now stumped. Please help.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I set the ie options back to default and i did find 4 instances of the HOSTS files. One in the Spybot program, one that says hosts.sbs.sig and then two folders in the program files\support.com\backup prgram. (Hosts and hosts.ics). I found one in the windows\system32\drivers\e
nopes i dont think this the original hosts file, the original location for this file is windows\system32\drivers\e
cant u find any Hosts file there ??
Can u Download HijackThis v1.98.2, run it, Save the LOG file and Post it here ??
http://tools.radiosplace.c
I found the dll file on a website. Here's my log
Logfile of HijackThis v1.98.2
Scan saved at 3:28:12 PM, on 8/16/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.e
C:\WINDOWS\system32\winlog
C:\WINDOWS\system32\servic
C:\WINDOWS\system32\lsass.
C:\WINDOWS\system32\svchos
C:\WINDOWS\System32\svchos
C:\WINDOWS\system32\spools
C:\Program Files\Alwil Software\Avast4\aswUpdSv.e
C:\Program Files\Alwil Software\Avast4\ashServ.ex
C:\WINDOWS\System32\ZoneLa
C:\WINDOWS\System32\svchos
C:\WINDOWS\system32\ZoneLa
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.ex
C:\PROGRA~1\ALWILS~1\Avast
C:\PROGRA~1\ALWILS~1\Avast
C:\WINDOWS\System32\ctfmon
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\MICROS~2\Offic
C:\Program Files\Microsoft Office\Office10\WINWORD.EX
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\WINZIP\wzqkpic
C:\PROGRA~1\WINZIP\winzip3
C:\unzipped\msvbvm60\Hijac
R0 - HKCU\Software\Microsoft\In
R0 - HKCU\Software\Microsoft\In
R0 - HKCU\Software\Microsoft\In
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-7
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-0
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-C
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-0
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-0
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.ex
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast
O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\Avast
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C
O9 - Extra 'Tools' menuitem: Fill Forms &] - {320AF880-6646-11D3-ABEE-C
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C
O9 - Extra 'Tools' menuitem: Save Forms &[ - {320AF880-6646-11D3-ABEE-C
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-0
O9 - Extra 'Tools' menuitem: RF Toolbar &2 - {724d43aa-0d85-11d4-9908-0
O15 - Trusted Zone: http://download.windowsupd
O16 - DPF: Video Poker - http://download.games.yaho
O16 - DPF: Yahoo! Backgammon - http://download.games.yaho
O16 - DPF: Yahoo! Blackjack - http://download.games.yaho
O16 - DPF: Yahoo! Graffiti - http://download.games.yaho
O16 - DPF: Yahoo! Literati - http://download.games.yaho
O16 - DPF: Yahoo! NBA StatTracker - http://aud4.sports.yahoo.c
O16 - DPF: Yahoo! NFL GameChannel StatTracker - http://aud7.sports.sc5.yah
O16 - DPF: Yahoo! NFL StatTracker - http://aud10.sports.yahoo.
O16 - DPF: Yahoo! Poker - http://download.games.yaho
O16 - DPF: Yahoo! Pool 2 - http://download.games.yaho
O16 - DPF: Yahoo! Towers 2.0 - http://download.games.yaho
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-0
O16 - DPF: {38578BF0-0ABB-11D3-9330-0
O16 - DPF: {41F17733-B041-4099-A042-B
O16 - DPF: {644E432F-49D3-41A1-8DD5-E
O16 - DPF: {6A060448-60F9-11D5-A6CD-0
O16 - DPF: {6D5FCFCB-FA6C-4CFB-9918-5
O16 - DPF: {6F6DBC29-7A0C-4AC0-A42D-1
O16 - DPF: {74D05D43-3236-11D4-BDCD-0
O16 - DPF: {A8739816-022C-11D6-A85D-0
O16 - DPF: {BA83FD38-CE14-4DA3-BEF5-9
O16 - DPF: {BE5431D2-0F30-11D4-89D9-0
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-0
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0
O16 - DPF: {E77C0D62-882A-456F-AD8F-7
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-0
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0
R0 - HKCU\Software\Microsoft\In
R0 - HKCU\Software\Microsoft\In
R3 - Default URLSearchHook is missing
==========================
nopes the LOG is clean, just fix the above three lines,,, did u check the windows\system32\drivers\e
and BTW when u try to access those secure sites, what error do u get ??
did u check the windows\system32\drivers\e
and BTW when u try to access those secure sites, what error do u get ?? I get a page cannot be displayed on the secure sites and then on Windows Update I get an error message that says 0x80072EFD.
>> It can't open the icalendar file and the other is a .SAM
it shud be an ICS file.... and when u right click it and Open With Notepad, u shud get soemething like following text....
# Copyright (c) 1993-2001 Microsoft Corp.
#
# This file has been automatically generated for use by Microsoft Internet
# Connection Sharing. It contains the mappings of IP addresses to host names
# for the home network. Please do not make changes to the HOSTS.ICS file.
# Any changes may result in a loss of connectivity between machines on the
# local network.
#
u just want to confirm that no Extra Websites entries are added here,,, ??
see a similar thread here >> http://computing.net/windo
When I open I get this...
# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample LMHOSTS file used by the Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to computernames
# (NetBIOS) names. Each entry should be kept on an individual line.
# The IP address should be placed in the first column followed by the
# corresponding computername. The address and the computername
# should be separated by at least one space or tab. The "#" character
# is generally used to denote the start of a comment (see the exceptions
# below).
#
# This file is compatible with Microsoft LAN Manager 2.x TCP/IP lmhosts
# files and offers the following extensions:
#
It doesn't even contain a place for IP addresses. It just give examples.
I did try the other site and none of those solutions worked.
ok Hosts file os OK,,, so try some suggestions from here >> http://www.infinisource.co
and if it fails then try creating a New user account, and check there for the problem..... coz it can be possibel that only ur user profile is corrupted, and other users can access the secure websites... in that case we can move ur corrupted profile to the new user !!!!
How to copy data from a corrupted user profile to a new profile
http://support.microsoft.c
>> I feel like I'm wasting your time.
I feel the Exact oppsite of this =(
I think that a specific port has been closed and is required to reopen.... but im not sure abt it :-?
so before going to that route, give a Try to running this Winsock Repair for XP:
http://www.spychecker.com/
check here >> http://support.microsoft.c
can u remember anything abt the time when all this started, i mean any new addition\removal of software or any update was installed to ur firewall or windows ??
that's strange i have looked everywhere and 90% of the times, it was happened due to Firewall blocking ActiveX scripts, and rest 10% becoz of ICF was blocking ports.... !!!!
if it has started just one or two days ago.... can we think of a system restore after doing all these things =|
Unfortuantely, I went away on vacation and then things started happen. I also cannot do a system restore because I turned off system restore and restarted my computer. I now have no points to restore it to.
This did happen to me a few months ago and I removed Norton and then switched to Zone Alarm and Avast and things worked fine. I last updated Windows on July 18th.
Hi,
Please try these options and let me know if it works, btw have you tried disabling all the spyware detection applications and checked.
http://support.microsoft.c
Go to start/run
Type in: regsvr32 softpub.dll
Press Enter or click OK
can u try that Port thing mentioned here >> http://www.experts-exchang
i think most of these suggestions we have tried already >> http://www.jsiinc.com/SUBP
we have not tried one thing still..... i think !!!!
Repair or Reinstall Internet Explorer in Windows XP:
http://www.theeldergeek.co
(First run the SFC scan, and then reinstall using ie.inf method)
then try running this tool:
http://www.mvps.org/srames
restart and check ??
Hi,
Have you tried my solution. did it work. I see from the comments added to this issue, you have tried all the stuff , have tried reinstalling IE
http://support.microsoft.c
u have a wireless router, what if u try to upgrade its drivers or firmware ??
I have just went thru a nearly similar problem >> http://www.experts-exchang
Hello,
I think you have tried everything uptill now, why not just go ahead and try windows repair or windows reinstall, since other systems are working fine. This the option you can try and that definately would resolve the issue. Instead of trying all the other options and wasting time, why not try reinstall.
Thanks
Try this to see if this will work
Click Start menu, and then click the Run icon.
In the small box that Opens, type the three letters: cmd then click the OK button.
In the command prompt window that just opened (a black background and white text), type the following commands, pressing the ENTER key on your keyboard after each line:
net start cryptsvc
regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
regsvr32 cryptdlg.dll
Now type the word: exit and the window will close.
Now Reboot and try and Microsoft Windows Update again....
I tried all of the suggestions and nothing worked.
In fact now I can't even open up IE. It just says that page cannot be displayed. However, email works just fine. I can send and receive no problem. I thought that it might be a problem with IE so I downloaded Netscape and the same problem persisted. Is it possible that something is blocking just the Internet ports and if so what can I do to open these ports up?
Thanks.
kingofun.... why dont u dot his,,,,,, post a minium points question(20 points) in Networking area, and give the link to this question, with a Heading somehting like this,,,, "500 Points question, Cannot Access Secure Websites"
So that Experts there can come here and can instruct u to the right steps..... its the matter of ports and router etc etc...... and it can be covered by Networking Experts more better..... and sadly im not among them =|
what model router is it? you might need to open up port 443. I can give you instructions if you give me the model#
Also make sure that both SSL 2.0 and SSL 3.0 are enabled in IE (Tools -> Internet Options -> Advanced -> and scroll down to security)
The file listed above is LMHOSTS. not HOSTS.
are you using ICS or proxy server?
you are positive that ICF and all firewall programs are disabled?
also run this check:
http://www.verisign.com/ad
I'm using the DLINK DI-644+. I contacted them and they had me ping websites using the command prompt and I successfully pinged those sites.
I'm using the Internet Connection on Windows XP.
I have no firewalls that I have am aware of running.
I cannot open the verisign site.
I'm connected to the net via cable.
I don't know how to do the port 443 or the MTU thing.
Thanks!
Look and see if the Dlink is blocking activex or java.
I know that when I block the activex on our cisco it blocks the windows updates.
Also do in IE help about and what is your cipher strength...0 or 128.
if 0 then
Cipher strength appears as 0-bit in Internet Explorer
http://support.microsoft.c
What site are you trying to get to ?
Try https://www.citibank.com/u
I can't even get to any site now...www.usatoday.com or yahoo or google, but I can ping them.
I'm using another laptop to write these comments because I can't access this site. I was able to do them and then using one of the tips earlier on this page, I am totally disconnected. I thought it might be an IE error so I downloaded Netscape and I cannot access any website on that browser either.
If you can ping them by name, it is not a DNS issue or a routing issue, but a port 80 / 443 issue.
Go to
Tools
Internet options
Advanced
Restore defaults
Flush all content
Tools
Internet options
Delete Files
Delete offline Content
Tools
Internet options
Settings
Set to "Every Visit..."
Set cache to 1mb
Close browser and reopen
Sorry if we are just looking at basics...sometimes they get overlooked.
On to the more advanced stuff...
Frequently Asked Questions About Page Cannot Be Displayed Errors in Internet Explorer
http://support.microsoft.c
These should at least narrow it down.
Try the following steps:
1. Open c:\windows\system32\driver
Just in case you don't know: 'etc' is a directory;
2. Save the file 'hosts' on a floppy (this is optional);
3. Delete the file 'hosts' from your computer;
4. Open a Command Shell: Click Start ---> All Programs ---> Accessories ---> Command Prompt;
5. At the DOS Command Prompt, type: nbtstat -R
(there is an empty space between 'nbtstat' and '-R').
After pressing 'Enter', Windows will be forced to re-lookup any of those names it might be keeping in memory and all websites should be reacheable.
KB832894 security update for Internet Explorer, from Microsoft update site, induces sometimes errors when connecting to websites. Microsoft doesn't say anything about this, but I had this experience (might not be your case). However, following steps 1-5 solves your problem in multiple cases, even when your computer gets infected with the Sasser worm (which blocks access to anti-virus sites).
Regards,
Wesley
IP - 192.168.0.101
Subnet - 255.255.255.0
Default Gateway - 192.168.0.1
Connection-specific DNS Suffix - echryh01.nj.comcast.net
Router - 192.168.0.1
Netstat
Active Connections
Proto Local Address Foriegn Address State
TCP cg919033-a:2432 192.168.0.1:5678 TIME_WAIT
TCP cg919033-a:2438 192.168.0.1:5678 TIME_WAIT
TCP cg919033-a:2459 192.168.0.1:5678 TIME_WAIT
TCP cg919033-a:2489 192.168.0.1:5678 TIME_WAIT
TCP cg919033-a:2504 192.168.0.1:5678 TIME_WAIT
TCP cg919033-a:2516 192.168.0.1:5678 TIME_WAIT
TCP cg919033-a:2540 192.168.0.1:5678 ESTABLISHED
I am recommending running a tool called winsockfix. BUT, DO NOT restart after it fixes your registry. You can cancel out of the restart by closing the dialog box with the X in the upper right hand corner.
Immediately after closing the dialog box, reinstall the TCP/IP protocol for your adapter that you use to connect to the internet.
Then you can restart the computer.
Go to "Start" then "Run" and type in: cmd
then press OK
You should have a window with a command prompt
type in: ipconfig /release
then press enter
This should release all of your adapters IP configurations
If that works properly then go to the next step
type in: ipconfig /renew
then press enter
Does your IP configuration renew properly?
If it does, what are the settings?
If you put in the IP address of a site in a web browser, your DNS doesnt matter because there is no Name to translate. His browser will not even go to an IP address in the address bar.
Your network adapter seems to be working fine.
Outlook is working and connected to the web because you are getting email.
IE and Netscape cannot connect to web.
I believe it is a trojan that is blocking. Try downloading and running Stinger, a virus removal tool from Mcafee from a command prompt not thru windows to see if it can find a trojan.
Did you say other computers on the same router can or cannot get thru to a web page?
It may also be a problem with your RoboForm software.
http://www.roboform.com/fa
Try the page above for some answers on uninstalling
You can also try SpyBot S&D from www.safer-networking.org
It is a free trojan removal tool and rated the one of the best.
I would not subject my dog to Mcafee.
JMHO
have you tried going to
http://192.168.0.1/
That should be the configuration page for your router. I thought someone had recommended this already, but I can't find it in the post above.
I did the Stinger - it found nothing.
I did a repair of the OS earlier and still no connectivity.
Could there be a dormant virus that isn't detectable but doing this damage?
I contacted Dlink and they said it was a browser issue because I had connectivity on the two other computers in the house.
Should I just c:\format everything?
I noticed in one of your posts above that you have Siber Systems - RoboForm software installed.
It could cause problems that will affect both browsers - IE and Netscape. It saves passwords, usernames, etc. based upon profiles, users, etc.
Visit the link below and try their troubleshooting ideas as a last resort:
http://www.roboform.com/fa
While I can appreciate the value of formatting and reinstalling OS, it is a time consuming and painstaking process.
I personally do a flush of my system once a year. I usually combine it with a buidling a new system. It takes me a full weekend to get my machine back in order.
There are so many items to backup and restore. Outlook PST file, Favorites, and tons of Data for example.
Then the formatting of the disk and installing tons of software. Then driver and windows updates to install. It is not just a quick fix.
If I am not doing a complete system upgrade, then I will at least buy a new hard drive to use as my new master. That way my old system is still in-tact on the old hard drive as a slave.
Once I am satisfied with everything working properly and ALL of my data and software is reinstalled, I format the old hard drive. I usually leave the old hard drive in-tact for a month to make sure I havent overlooked anything on it.
I have had alot of people put in their restore disks from the manufacturer and when they went looking for their email and address book data it wasnt there. They thought the restore was only going to reinstall the OS and original programs. Or they thought they backup up all their data and didnt get the Outlook PST file or favorites, etc. and all was lost and they were quite mad.
Sometimes it is the most obvious and tiniest fix that is overlooked when troubleshooting a problem. Format and reinstall is not always the best option.
Can you give Spybot a try, it is an excellent program to find trojans/spyware, etc.
Also for virus, even though I run norton, (we are resellers) i have seen on my personal system that norton missed several virus that FSecure was able to find and fix. They were in the sysvol and other locations. FSecure has a 30 free trial and it is worth a try.
Also you could run the MS System File Checker.
at command prompt try sfc /scannow
None of these will damage your system.
Did you try the thing with the RoboForm? Do you have RoboForm? I remember seeing an article the other day on it...and how it can block SSL, but since you cannot get to anything that may not be the issue.
Mark Lahn had the same problem as you on June 27th, and posted here:
http://www.computing.net/w
Lots of people had this problem, as you will see by clicking the link above. I also had this problem. My solution was the one I posted on this page. It gained me access to all sites as long as I was not rebooting the computer (I hope you didn't reboot the computer after following the steps I advised you to take). After I installed the next automatic upgrade from Microsoft for my XP the problem dissappeard. The weird thing is that people who had this problem, had it in June-July, but you are having it now.
Mark regained access to secure webpages by opening port 443.
You should not format your hard drive as long as you don't have viruses or other serious malfunctions, because it's a pain and you might end having the same problem!
Regards,
Wesley
brian,
If any of us would know exactly what he is having problems with, then his computer would work fine now!
It's difficult to find solutions as long as we are not actually seeing what's going on there. What I know is that he doesn't have access to secure webpages and Microsoft update center. I had exactly the same problem, found a solution and posted it here. There are a lot of people who had this problem lately, which arises some questions.
Only kingofun can solve his problem, reading everybodys opinions, and in the end he will tell us what really happened!
Best regards,
Wesley
I did not intend to be insultive by my comment, only inquisitive, after reading your posting I went and re-read my and it did come across as hars, for that I apologize, I am just trying to make sense of the issues and resolutions. So many times we, me too, chase after the wrong boat and then the problem goes away and we assume that our actions were the resolution when in fact they were not and are not reproduceable.
I understand from previous postings for kingofun he cannot get to any web sites now.
kingofun--sorry I missed your posting about how to change the dns..since you can ping the sites by name, dns is NOT the issue.
Did you try to clear the arp of the D-Link?
Is there a way to clear the Translation Table?
Are there any static mappings thru the D-link?
These are just things to ponder and maybe it can give you a place to look.
bkl
Thanks all for your help...
I just reformatted the hard drive and because I had deleted a profile (before backing up) earlier in the posts, it made the reformatting a little easier to swallow. In my novice opinion, it was a undetected virus that was causing the problem, but now I will never know. The computer is up and running as evidence of this post that I am typing.
The only thing to do is settle up with the points. Any suggestions?
Business Accounts
Answer for Membership
by: SheharyaarSaahilPosted on 2004-08-16 at 11:44:52ID: 11813545
Hello kingofun29 =)
Have u tried to reset the default settings in Internet Explorer>Tools>Internet Options>Advanced
or search ur hard drive for a file called HOSTS, and check if u have Extra entries for the sites which u cannot access ??
Try disabling the firewall temporary and check for the problem ??