internet explorer encryption fails; denies access

Greetings EE Gods....
I humble to your wisdom.  :)

I have an IE problem on a family member's machine, where any page requiring Logon/password results in immediate failure when form is submitted.  Google mail is the primary example that resulted in the below screenshot.

Here's what she said:


I'm not sure what my dad said, but it's not a huge problem, so I don't want to take up your time if you're busy. However, if you do have a little extra time or this sounds familiar, here goes. When I'm trying to use internet explorer and access a site (such as my email) that requires a password, I get the standard error message saying it can't display the webpage (screenshot attached). This does not occur when I go to any non passworded site on Internet Explorer, nor does it occur when I use Firefox. However, when I try to use other applications that access the internet and require passwords to do so, such as iTunes or MSN messenger, I also get error messages, though what the error message says differs based on the program. The computer people here at school think it is because the cipher strength for Internet Explorer shows as 0-bit, rather than the standard and so I can't access any secure sites, but they were unable to fix it.

Help?

Thanks
Evan

IEerrormessage.JPG
LVL 9
Evan CutlerVolunteer Chief Information OfficerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

dfxdeimosCommented:
Step 1) Reset Internet Explorer to its default settings by following "Method 4" in this link:

http://support.microsoft.com/kb/936213

Step 2) Rebuild the TCP/IP Stack on the client machine by:

Opening My Computer and navigating to C:\Windows\System32\Drivers and deleting "tcpip.sys". Wait 30 seconds and reboot your computer.

Report back.
0
jcimarronCommented:
arcee123--Did you try clicking on the links offered on the error message?
Resetting the cipher strength to 128 bit
http://www.freecomputeradvice.net/index.cfm/2008/10/2/Cypher-Strength-0bit
http://www.netomatix.com/articles/KBArticle.aspx?a=303807  Perhaps out of date

Some more ideas
http://support.microsoft.com/kb/926431
0
orangutangCommented:
Also, download and open Dial-a-fix (http://wiki.lunarsoft.net/wiki/Dial-a-fix#Mirrors.2Fdownload_locations.2C_and_articles) click "Fix SSL/HTTPS/Cryptsvc:" and click "GO".
0
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

Evan CutlerVolunteer Chief Information OfficerAuthor Commented:
The problem is not SSL-specific.
This is happening in any Logon-password site.

For example, Google Mail is not 128-bit, however the screenshot above is the result.
This happens other places too.

Thanks.
0
dfxdeimosCommented:
Did you follow my suggestions?
0
Evan CutlerVolunteer Chief Information OfficerAuthor Commented:
Yes.  no luck.  same window.
Thank you tho.
0
dfxdeimosCommented:
It looks like you are running Internet Explorer 8... is that the case?
0
jcimarronCommented:
arcee123--Did you try resetting the cipher strength to 128 bit as mentioned in my earlier post?  You should want that degree of protection in any event.
0
Evan CutlerVolunteer Chief Information OfficerAuthor Commented:
Got this response.

Alright, definitely got some errors there. The first time was when I tried the Shdocvw.dll line. Since I tried it several times, I'm pretty sure I didn't type it wrong. On every instance, I got a message saying, "DllRegisterServer in Shdocvw.dll failed. Return code was:0x8002801c". The second problem was when I input Mshtml.dll. This time I got the message that, "Mshtml.dll was loaded but the DllRegisterServer entry point was not found. This file cannot be registered." I'm including screenshots of both. Hopefully that helps.

error1.JPG
error2.JPG
0
dfxdeimosCommented:
Can you run an "sfc /scannow" at the command prompt and output the results to us?
0
jcimarronCommented:
arcee123--Concerning mshtml.dll, this file is self registering.  Do not worry that you cannot register it.
But be sure a copy is in the C:\Windows\System32 folder.  Post back if not.
Concerning shdocvw.dll--this is a little more complicated
http://www.pcreview.co.uk/forums/thread-704571.php
http://www.pcreview.co.uk/forums/thread-3232636.php
P.S.  Have you looked into the 128 bit cipher strength issue yet?
http://www.tek-tips.com/faqs.cfm?fid=5311
0
jcimarronCommented:
arcee123--My last post and that of dfxdeimos crossed.  A run of sfc /scannow should ensure that the two .dll files are where they should be on your hard drive.  So run regsvr32 again.
0
orangutangCommented:
Also, try "Method D: Reset permissions for any unwriteable registry subkeys" from http://support.microsoft.com/kb/917925
You don't have to be installing IE7 to try it.
0
Evan CutlerVolunteer Chief Information OfficerAuthor Commented:
Just to let you guys know.
I sent your recommendations back over to my cousin.

I'm waiting on a response.
I promise to return when she does.  I think Monday.

Thanks for EVERYTHING so far.

Evan
0
Evan CutlerVolunteer Chief Information OfficerAuthor Commented:
ok guys.  Thanks for the effort.

here's what she is saying now since we gave her the sfc command:

I've tried running it a couple times, but on each occasion, I first get a box that says "Please wait while Windows verifies that all protected Windows files are intact and in their original versions," which I guess is supposed to happen, then another message pops up saying "Files that are required for Windows to run properly must be copied to the DLL Cache. Insert your Windows XP Professional CD-ROM now." I don't know if this is supposed to happen, but I don't have my Windows CD. I could probably get it sent out, though.

Are we getting closer to reload?
or am I missing something?

thanks again.
Evan
0
jcimarronCommented:
arcee123--SFC needs to be directed to where the Operating Systems files are.
http://www.helpwithwindows.com/WindowsXP/howto-24.html
You can see the section about the I386 folder.  Can you find such a folder with the size around 500MB  in C:\ or C:\Windows.  If so, you can tell SFC to look there by following the directions in the above link.
If not, you may try clicking that Retry button (several times if needed) and see if SFC will work.  But that is a long shot (it probably will not) and you will need to get a WinXP Pro CD.
P.S.  (If nothing works, see when you go to HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Setup what the Data column entry for Source Path is.)
0
Evan CutlerVolunteer Chief Information OfficerAuthor Commented:
is that the directio nwe need to go?  I'm just making sure, because  I know my cousin only knows what we are saying because we are telling her what to do.

The end result here is to get her to be able to log back on GMAIL and other password-protected sites...not necessarily SSL.

If so, I'll tell her immediately.

Thanks
0
jcimarronCommented:
arcee123--Am I sure?  No.  But I am just trying the most obvious things first.
Some things were suggested earlier, but I am not sure any action was taken.
"Did you try clicking on the links offered on the error message?"
Even though the Cipher Strength thing may not be the problem, it is good practice, in general, to have it working.  Who knows?  It may fix the problem.
You had problems registering two .dll files.  SFC /SCANNOW is a good way to make sure ALL Operating System files, in uncorrupted form, are on the Harddrive.  The simplest way to run SFC is to have the WinXP CD.  But since that is not available, I suggested an alternative--though it is not as simple.  This reference may be of interest
http://www.locostbuilders.co.uk/viewthread.php?tid=99166
A scan with antivirus and antispyware programs (with up to date reference definition files) could also help.
At some point, if nothing works, a Repair Install may be needed.  But for that you definitely need the WinXP CD.  http://www.michaelstevenstech.com/XPrepairinstall.htm
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Evan CutlerVolunteer Chief Information OfficerAuthor Commented:
got it.
Thanks much.
I will work on this now.  Will let you know.
Most appreciated.

Wlil tell her now.

Evan
0
Evan CutlerVolunteer Chief Information OfficerAuthor Commented:
We decided to send her to the university lab to reload the machine.  We believe there was a virus that infiltrated her system and dismembered some of her IE Dlls preventing her ability to do anything. Thanks much.
0
jcimarronCommented:
arcee123--Thank you for the feedback.
0
orangutangCommented:
What worked?
0
Evan CutlerVolunteer Chief Information OfficerAuthor Commented:
We think this was a virus.

I sent her to the campus computer lab where a source disk was available.  They told me that they did a scrub, but I thought it was from a substandard virus scan.  I had her go get a better one, and it came back with tons of problems, including dlls removals.

So we reloaded the system.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Web Browsers

From novice to tech pro — start learning today.