IE not display any in windows update site

[dearde4n]

why my IE v6 wont display the windows update web? i dont make any changes in IE setting. but its can display in microsoft homepage? why this can be happen?

[Gecko]

Do you receive any error messages when you try to visit the update page?

[dearde4n]

[Gecko]

Please download , unzip it to it's own folder.
Start HijackThis and select 'Do a system scan and save a logfile'
Now post the contents of the logfile back into this thread

[dearde4n]

Logfile of HijackThis v1.99.1
Scan saved at 9:40:28 AM, on 2/27/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRAM FILES\EASY FILE PROTECTOR\EFPA.exe
C:\Program Files\iolo\System Mechanic Professional 6\IoloSGCtrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\NMSSvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\PROGRA~1\Xpoint\xpadmin\xpadmin.exe
c:\windows\explorer.exe
C:\PROGRA~1\Xpoint\agent\Xpagent.exe
C:\PROGRA~1\Xpoint\EEClient\xpclient.exe
C:\WINDOWS\system32\cmd.exe
C:\PROGRA~1\Xpoint\SAS\jre\bin\javaw.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Xpoint\PE\Skin\rrpcsb.exe
C:\Program Files\iolo\System Mechanic Professional 6\SystemGuardAlerter.exe
C:\Program Files\Xpoint\PE\pcrecsa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iolo\System Mechanic Professional 6\SMSystemAnalyzer.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
C:\Program Files\GhostSurf 2005\Proxy.exe
C:\Program Files\GhostSurf 2005\Scheduler daemon.exe
C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
C:\Program Files\Winamp\Winamp.exe
C:\PROGRA~1\iolo\SYSTEM~1\SysMech6.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\KPM_User\LOCALS~1\Temp\Rar$EX00.422\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer

= 127.0.0.1:7212
F2 - REG:system.ini: Shell=c:\windows\explorer.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -

C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [Tgcmd] "C:\Program Files\Support.com\bin\tgcmd.exe /server"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe

irprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [Rapid Restore] C:\Program Files\Xpoint\PE\Skin\rrpcsb.exe
O4 - HKLM\..\Run: [GhostSurfDelSatellite] "C:\Program Files\GhostSurf 2005

\DeleteSatellite.exe"
O4 - HKLM\..\Run: [SystemGuardAlerter] "C:\Program Files\iolo\System Mechanic

Professional 6\SystemGuardAlerter.exe"
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti

-Virus Personal\kav.exe" /minimize
O4 - HKLM\..\Run: [ioloDelayModule] C:\Program Files\iolo\System Mechanic

Professional 6\delay.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -

CheckReg
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic

Professional 6\SMSystemAnalyzer.exe"
O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program Files\XemiComputers\Active

Desktop Calendar\ADC.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common

Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: GhostSurf proxy.lnk = C:\Program Files\GhostSurf 2005\Proxy.exe
O4 - Startup: Scheduler.lnk = C:\Program Files\GhostSurf 2005\Scheduler

daemon.exe
O4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky

Lab\Kaspersky Anti-Hacker\KAVPF.exe
O8 - Extra context menu item: Blok Semua Gambar dari Server yang Sama -

C:\Program Files\Avant Browser\AddAllToADBlackList.htm
O8 - Extra context menu item: Buka pada Avant Browser Baru - C:\Program

Files\Avant Browser\OpenInNewBrowser.htm
O8 - Extra context menu item: Buka Semua Links pada Halaman Ini... - C:\Program

Files\Avant Browser\OpenAllLinks.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1

\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Pencarian - C:\Program Files\Avant

Browser\Search.htm
O8 - Extra context menu item: RapidShare-Download - res://C:\DOCUME~1

\KPM_User\LOCALS~1\Temp\ir_ext_temp_0\AutoPlay\Docs\more-rapid.exe/RsMenExt.html
O8 - Extra context menu item: Sorot - C:\Program Files\Avant

Browser\Highlight.htm
O8 - Extra context menu item: Tambahkan ke Daftar Hitam AD - C:\Program

Files\Avant Browser\AddToADBlackList.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -

C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -

C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-

00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage

Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -

http://update.microsoft.com/microsoftup ... /muweb_sit

e.cab?1134718567593
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) -

http://housecall65.trendmicro.com/house ... 2/activex/

hcImpl.cab
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool

Class) -

http://us.dl1.yimg.com/download.yahoo.c ... r1_7us.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Access Remote PC Service 4.7.3 - Unknown owner - C:\Program

Files\Access Remote PC 4.7.3\rpcsetup.exe" /service (file missing)
O23 - Service: Easy File Protector (ACDService) - Unknown owner - C:\PROGRAM

FILES\EASY FILE PROTECTOR\EFPA.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common

Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: iolo System Guard (IOLO_SRV) - Unknown owner - C:\Program

Files\iolo\System Mechanic Professional 6\IoloSGCtrl.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky

Anti-Virus Personal\kavsvc.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program

Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32

\NMSSvc.exe
O23 - Service: Xpoint PCRadmin Server (PCRadminServer) - Unknown owner -

C:\PROGRA~1\Xpoint\PE\pcradmin.exe
O23 - Service: PLSRemote Service (PLSRemoteSvc) - Unknown owner -

C:\WINDOWS\SYSTEM32\PLSRemote.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner -

C:\WINDOWS\system32\PsaSrv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog

Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Xpoint Admin Server (XPadminServer) - Unknown owner - C:\PROGRA~1

\Xpoint\xpadmin\xpadmin.exe
O23 - Service: Xpoint Agent Server (xpAgentServer) - Unknown owner - C:\PROGRA~1

\Xpoint\agent\Xpagent.exe

[Gecko]

The only things that even look suspicious are the below entries and I don’t think they would be the problem:
O8 - Extra context menu item: RapidShare-Download -res://C:\DOCUME~1 \KPM_User\LOCALS~1\Temp\ir_ext_temp_0\AutoPlay\Docs\more-rapid.exe/RsMenExt.html
O23 - Service: Access Remote PC Service 4.7.3 - Unknown owner - C:\Program Files\Access Remote PC 4.7.3\rpcsetup.exe" /service (file missing)


I see that you are running Ghost Surf this could be the problem with Microsoft and their download page.
Microsoft doesn’t play well with proxies.

You should also check your Avant Browser black list to make sure it didn’t get listed by mistake.

And lastly make sure that System Mechanic is not the cause of not displaying the page.

[dearde4n]

so, what should i do wif that? removing soft?

[Gecko]

First of all I would try shutting of Ghost Surf to see if that is the problem.
Press Ctrl + Alt + Delete at the same time to bring up the task manager.
Select Proxy.exe and then click the end task button, now see if you can get windows update page to show.

You could also download directly from MS download page found here:
http://www.microsoft.com/downloads/Sear ... laylang=en

Do you have Automatic Updates turned on?
1. Click Start, and then click Control Panel.
2. Depending on which Control Panel view you use, Classic or Category, do one of the following:
a Click System, and then click the Automatic Updates tab.
b Click Performance and Maintenance, click System, and then click the Automatic Updates tab.
3. Make sure Automatic Updates is turned on.