Suddenly blocked HELP please

  1. #1
    CoffinDodger is offline Newbie

    Suddenly blocked HELP please

    I'm a desperate newbie - sorry if I've posted in wrong place but this site has come highly recommended

    As from 13th January, From Internet explorer (6) I can't load the National Lottery site at all - it isn't on the Restricted list - in fact it is on the Trusted Zone list (there are no parental restrictions on this computer).

    From AOL I can get to the National Lottery home screen but not further into the secure sign-on screen. I have telephoned The National Lottery online help, but they couldn't help, lol....

    I have disabled the Firewall, removed all entries to the restricted list in IE6, disabled SpyBot - still no joy

    Lost for what to try next


  2. #2
    Neal is offline Dedicated Member
    Welcome,


    Do everything here http://www.d-a-l.com/help/showthread.php?t=32403

    Then copy/paste a hijackthis log back here and we will take a look.

    Plus the uninstall list as instructed at the above link I provided for you. Thanks.

  3. #3
    CoffinDodger is offline Newbie
    Thanks so much for reponding Neal ...here we go...

    I have AVG 7.5.516 - no threats reported
    I have SPYBOT 1.5 - no threats reported
    I have Ad-Aware 2007 - usually about 15-20 (TAC 3 or less) threats reported - all can be deleted -

    Uninstall List as follows :-

    Ad-Aware 2007
    Adobe Flash Player 9 ActiveX
    Adobe Reader 6.0.1
    Adobe Shockwave Player
    AOL Coach Version 1.0(Build:20040229.1 uk)
    AOL Uninstaller (Choose which Products to Remove)
    AOL You've Got Pictures Screensaver
    ATI - Software Uninstall Utility
    ATI Control Panel
    ATI Display Driver
    AVG 7.5
    Camera RAW Plug-In for EPSON Creativity Suite
    DVD Solution
    EPSON Attach To Email
    EPSON Easy Photo Print
    EPSON File Manager
    EPSON Printer Software
    EPSON Scan Assistant
    EPSON Stylus C90_91_D92 Manual
    EPSON Web-To-Page
    HijackThis 2.0.2
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Player 11 (KB939683)
    Hotfix for Windows XP (KB926239)
    Java(TM) 6 Update 2
    Java(TM) 6 Update 3
    Java(TM) SE Runtime Environment 6 Update 1
    Learn2 Player (Uninstall Only)
    Medi@Show
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    MSXML 4.0 SP2 (KB936181)
    Multimedia Launcher
    NVIDIA Drivers
    Power2Go 3.0
    PowerDirector
    PowerDVD
    PowerProducer
    QuickTime
    RealPlayer Basic
    Realtek AC'97 Audio
    REALTEK Gigabit and Fast Ethernet NIC Driver
    SAMSUNG CDMA Modem Driver Set
    SAMSUNG Mobile Composite Device Software
    Samsung Mobile phone USB driver Software
    SAMSUNG Mobile USB Modem 1.0 Software
    SAMSUNG Mobile USB Modem Software
    Samsung PC Studio 3
    Samsung PC Studio 3 USB Driver Installer
    Samsung Samples Installer
    Security Update for Windows Media Player (KB911564)
    Security Update for Windows Media Player 11 (KB936782)
    Security Update for Windows Media Player 6.4 (KB925398)
    Security Update for Windows Media Player 9 (KB917734)
    Security Update for Windows Media Player 9 (KB936782)
    Security Update for Windows XP (KB890046)
    Security Update for Windows XP (KB893756)
    Security Update for Windows XP (KB896358)
    Security Update for Windows XP (KB896423)
    Security Update for Windows XP (KB896428)
    Security Update for Windows XP (KB899587)
    Security Update for Windows XP (KB899591)
    Security Update for Windows XP (KB900725)
    Security Update for Windows XP (KB901017)
    Security Update for Windows XP (KB901214)
    Security Update for Windows XP (KB902400)
    Security Update for Windows XP (KB904706)
    Security Update for Windows XP (KB905414)
    Security Update for Windows XP (KB905749)
    Security Update for Windows XP (KB908519)
    Security Update for Windows XP (KB911562)
    Security Update for Windows XP (KB911927)
    Security Update for Windows XP (KB913580)
    Security Update for Windows XP (KB914388)
    Security Update for Windows XP (KB914389)
    Security Update for Windows XP (KB917344)
    Security Update for Windows XP (KB917953)
    Security Update for Windows XP (KB918118)
    Security Update for Windows XP (KB918439)
    Security Update for Windows XP (KB919007)
    Security Update for Windows XP (KB920213)
    Security Update for Windows XP (KB920670)
    Security Update for Windows XP (KB920683)
    Security Update for Windows XP (KB920685)
    Security Update for Windows XP (KB921503)
    Security Update for Windows XP (KB922819)
    Security Update for Windows XP (KB923191)
    Security Update for Windows XP (KB923414)
    Security Update for Windows XP (KB923689)
    Security Update for Windows XP (KB923980)
    Security Update for Windows XP (KB924191)
    Security Update for Windows XP (KB924270)
    Security Update for Windows XP (KB924496)
    Security Update for Windows XP (KB924667)
    Security Update for Windows XP (KB925902)
    Security Update for Windows XP (KB926255)
    Security Update for Windows XP (KB926436)
    Security Update for Windows XP (KB927779)
    Security Update for Windows XP (KB927802)
    Security Update for Windows XP (KB928255)
    Security Update for Windows XP (KB928843)
    Security Update for Windows XP (KB929123)
    Security Update for Windows XP (KB929969)
    Security Update for Windows XP (KB930178)
    Security Update for Windows XP (KB931261)
    Security Update for Windows XP (KB931784)
    Security Update for Windows XP (KB932168)
    Security Update for Windows XP (KB933566)
    Security Update for Windows XP (KB933729)
    Security Update for Windows XP (KB935839)
    Security Update for Windows XP (KB935840)
    Security Update for Windows XP (KB936021)
    Security Update for Windows XP (KB937143)
    Security Update for Windows XP (KB938127)
    Security Update for Windows XP (KB938829)
    Security Update for Windows XP (KB939653)
    Security Update for Windows XP (KB941202)
    Security Update for Windows XP (KB941568)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB941644)
    Security Update for Windows XP (KB942615)
    Security Update for Windows XP (KB943460)
    Security Update for Windows XP (KB943485)
    Security Update for Windows XP (KB944653)
    Spybot - Search & Destroy
    Update for Windows XP (KB894391)
    Update for Windows XP (KB898461)
    Update for Windows XP (KB900485)
    Update for Windows XP (KB908531)
    Update for Windows XP (KB910437)
    Update for Windows XP (KB911280)
    Update for Windows XP (KB916595)
    Update for Windows XP (KB920872)
    Update for Windows XP (KB922582)
    Update for Windows XP (KB927891)
    Update for Windows XP (KB930916)
    Update for Windows XP (KB931836)
    Update for Windows XP (KB933360)
    Update for Windows XP (KB938828)
    Update for Windows XP (KB942763)
    Update for Windows XP (KB942840)
    Update for Windows XP (KB946627)
    Viewpoint Media Player
    Windows Installer 3.1 (KB893803)
    Windows Media Format 11 runtime
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows Media Player 11
    Windows XP Hotfix - KB873339
    Windows XP Hotfix - KB885295
    Windows XP Hotfix - KB885835
    Windows XP Hotfix - KB885836
    Windows XP Hotfix - KB886185
    Windows XP Hotfix - KB887472
    Windows XP Hotfix - KB888302
    Windows XP Hotfix - KB890859
    Windows XP Hotfix - KB891781
    ZoneAlarm

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 7:19:20 AM, on 1/25/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    C:\WINDOWS\wanmpsvc.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
    C:\Program Files\Real\RealPlayer\RealPlay.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
    C:\Program Files\Common Files\AOL\1184277451\ee\AOLSoftware.exe
    C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIB ZE.EXE
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\WINDOWS\system32\Macromed\SHOCKW~1\SWHELP~2.EXE
    C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe
    C:\Program Files\AOL 9.0\waol.exe
    C:\Program Files\AOL 9.0\shellmon.exe
    C:\Program Files\Common Files\AOL\aoltpspd.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
    O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1184277451\ee\AOLSoftware.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKCU\..\Run: [EPSON Stylus D92 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIB ZE.EXE /FU "C:\WINDOWS\TEMP\E_S115.tmp" /EF "HKCU"
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\RunOnce: [Shockwave Updater] "C:\WINDOWS\system32\Macromed\SHOCKW~1\SWHELP~2.EX E" -Update -1020023 -waol.exe9.0
    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
    O4 - Global Startup: AOL 9.0 Tray Icon.lnk = C:\Program Files\AOL 9.0\aoltray.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O17 - HKLM\System\CCS\Services\Tcpip\..\{18B7696C-9840-448D-A9F2-4243777B55C0}: NameServer = 205.188.146.145
    O17 - HKLM\System\CS1\Services\Tcpip\..\{18B7696C-9840-448D-A9F2-4243777B55C0}: NameServer = 205.188.146.145
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

    --
    End of file - 6107 bytes

    and this is the Zone Alarm entry in the log file for the site I want to contact

    PE,2008/01/24,17:38:18 +0:00 GMT,ZoneAlarm Client,C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe,195.190.132.10:53,N/A

  4. #4
    Neal is offline Dedicated Member
    Here are somethings for you to try:




    Here are the steps that you should try to fix your "secure sites problem".

    Verify that Internet Explorer Is Using 128-Bit Encryption:

    * In Internet Explorer, on the Help menu, click About Internet Explorer
    * The level of encryption on your computer appears next to the words Cipher Strength.
    * Verify that the Cipher Strength value appears as 128-bit
    * If the Cipher Strength is anything less then 128-bit, download the "Explorer Internet High Encryption Pack" to your computer's hard disk, and then install it.


    Delete Temporary Internet Files

    * There's also a possibility of some corrupted files in your Temporary Internet Files (TIF) storage. You should clear these
    * In Internet Explorer, on the Tools menu, click Internet Options, and select the General tab
    * Under Temporary Internet files, click Delete Files, and click OK when you are prompted to confirm the deletion


    Configure Security settings for the Trusted sites zone in Internet Explorer:

    * In Internet Explorer, on the Tools menu, click Internet Options, and select the Security tab
    * Select Trusted sites, and then click Default Level
    * Add the secure Web site you are trying to access to the Trusted sites zone. To do so, click Sites, type the address (URL) of the site in the Add this Web site to the zone box
    * Click Add, click OK, and then click Apply


    Clear the Secure Sockets Layer (SSL) slate and AutoComplete history:

    * In Internet Explorer, on the Tools menu, click Internet Options, and select the Content tab
    * Under Certificates, click Clear SSL State
    * Click OK when you receive the message that the SSL cache was successfully cleared
    * Under Personal information, click AutoComplete
    * Under Clear AutoComplete history, click Clear Forms. Click OK when you are prompted to confirm the operation.

    Verify that Internet Explorer is configured to use SSL 2.0 and SSL 3.0

    * In Internet Explorer, click on the Tools menu, click Internet Options, and select the Advanced tab
    * In the Settings box, under the Security header, click to select the Use SSL 2.0 and Use SSL 3.0 check boxes (if they are not already selected), and then click OK


    Verify that the Date and Time Settings on Your Computer Are Correct:

    * Because SSL certificates have an expiration date, if the date on your computer isn't correct, it may prevent you from connecting to secure sites.
    * To verify that your computer is configured with the correct date and time settings
    * Click Start > click Control Panel
    * Click Date, Time, Language, and Regional Options, and then click Date and Time
    * Select the Date & Time tab
    * Check to make sure that the date and time settings are configured to use the current date and time, and then click OK


    Check the file integrity of the IE and Outlook:

    * Click Start>Run> "sfc /scannow" (without quotes) It might ask for the Windows CD to upload the corrupted files
    * Click Start>Run> regsvr32 softpub.dll (without quotes) and wait for the OK message; then try again.

    Here are some Microsoft Knowledge Base articles dealing with this problem that you may like to look at if you aren't able to solve the problem. Just Google the error number and you should find some additional info on it!

    Like this: error # 261328

    * 261328 - Cipher Strength Appears as 0-Bit in Internet Explorer
    * 301803- Error Message When You Try to Connect to Secure Site: Client Certificate Has Expired or Is Not Yet Valid
    * 303807- "The Page Cannot Be Displayed" Error Message When You Try to View Web Page on a Secure Web Site
    * 305217- Page Cannot Be Displayed Error During SSL 3.0 Server Session Timeout
    * 811383- Internet Explorer Connectivity and Certificate Display Issues
    * 813951- You Cannot Access Your MSN E-mail Account or Authenticate with a Web Site in Various Programs
    * 821814- You Receive a "Page Cannot Be Displayed" Error Message When You Post to a Site That Requires Authentication

  5. #5
    CoffinDodger is offline Newbie
    Have done all the things you suggested - still can't get to that ONE site (National-Lottery.co.uk) - un-installed Zone Alarm (didn't help), un-installed AOL (didn't help). verified 128 bit encryption, deleted all cookies and temprary internet files, cleared the SSL and forms, checked SSL 2 and 3 in the options, ran sfc and regscr32 ... all to no avail. Also checked the Hosts list in Drivers/etc. in case the IP address (195.190.132.10) or the name (National-Lottery.co.uk) was there - it wasn't.

    Stumped now - any other suggestions anyone ?

  6. #6
    Neal is offline Dedicated Member
    Save 20% on AVG Internet Security 2012 Suite!
    Put the ISP into the browser address window and hit enter, I got to the site by doing that.

    Here is the site:

    http://195.190.132.10/player/p/home/home.do

+ Reply to Thread