Cannot Get Windows Updates or Visit Secure Sites

I have started working on an XP pro computer that can no longer go to secure web sites or get windows updates (the last updates were in Dec of '04). Initially, when going to the Update site, I would get the prompt to install ActiveX controls, the download would start, then Windows would say it blocked the file because of unknown publisher (wuweb_site.cab?XXXXXXXXXXX).

I checked Certificates and the tabs for Intermediate Certificate Authorities and Trusted Root Certification Authorities were empty. I tried copying them from another computer--that did not help. I installed them from Windows disk--that did not work. I deleted temp files, history, cleared the SSL slate. (I left cookies alone because the computer's owner was worried about being able to get back into sites that she does not know the username or password to. I have backed up cookies and favorites--Should I delete all the cookies?). I followed some steps in a KB article and "registered" some files and renamed the catroot2 file. Still no luck.

I installed firefox and imported the ie settings. Oddly, you can navigate to secure sites in firefox. But I still cannot get Windows updates or go to secures sites that don't work under firefox.

I had hoped to do a repair installation of Windows but I cannot-- "the version of windows you are trying to install is older than the current version" or something like that. (I don't think it is the same installation disk).

Should I reinstall IE? How is that done?

Now after my repair attempts, I cannot even download the update file. The yellow shield displays the warning: "Your security settings do not allow web sites to use ActiveX controls installed on your computer. This page may not display correctly. Click her for options." I cannot click anyware to continue. I believe my security settings correct and even tried the default level.

Have done Norton AV, Webroot Spysweeper, and Ad-Aware scans.

I have not been able to find any help on Microsoft sites. Does anyone know what might be going on with this computer?

Thanks for your help!

Tim

 

See if any of the troublshooting tips on this page point you in the right direction.

 

KauaiTim--If Miz' suggestion does not solve the problem, try putting the Windows Update site's URL into your Trusted Sites. (Uncheck the box "Require Server Verification... ")
If that does not help, you may have some baddies on that PC.
Consider the procedure here
http://www.windowsbbs.com/showthread.php?t=37074
After posting your HJT log, someone will be along to help.

 

Thanks Miz. I tried all those things.

Thanks Jim. I have looked for viruses and spyware, but cannot find any.

I tried to run system file checker. It flashed for a second then disappeared. That seemed odd.

The first time I tried to do a IE6 installation from the CD, the version checker said I installing an older version and would not allow me to continue.

I downloaded the installer and ran it from "run" with the switch "/Q ". It downloaded the application but would not install it. "The software you are installing has not passed Windows Logo testing to verify its compatibility with Windows XP. (Tell me why this testing is important.) This software will not be installed. Contact your system administrator. "

It actually got 29% of it installed before it quit. I am not sure where to go from here.

Update:

I tried running the installation again. This time I just moved the warning window aside instead of closing it. The installation ran until it got to "100%" but the window would not close and the warning message stayed up. Finally, I restarted the computer and tried to get a windows update. It stalled again at the ActiveX warning bar.

Could that warning message be bogus? Could the download be bogus?

 

KauaiTim--If you have put the Windows Update site into Trusted Sites, I have (almost) run out of ideas.
If just being able to get updates from Windows Updates is the issue, perhaps use Firefox (see especially second reference)
http://www.google.com/search?source...GLD:2004-31,GGLD:en&q=firefox+windows+updates
What versions of Windows (right click MyComputer|Properties) and IE (Help|About) are shown as now on the PC?
I am a little confused why you feel you should be reinstalling/updating IE rather than trying to repair what you have.

Perhaps the CD does contain an older version of Windows?
Have you tried Start|Run|type sfc /scannow|OK? You will need the WinXP CD. If "I tried to run system file checker. It flashed for a second then disappeared" means you tried that, then try running sfc /scannow from a command prompt.
If this is not your own PC with lots of personal data, then why not a reformat and reinstall of Windows? Even if there is lots of personal data, do you have anyway to back it up and then reformat?

 

Thanks for sticking with me, Jim!

I had added these sites to my trusted sites:
http://update.microsoft.com/windowsupdate/v6/default.aspx?ln=en-us
http://microsoft.com
https://microsoft.com

Thanks for the link on getting windows updates via firefox. That might be helpful. I will try it today. I will still need to get IE running because the computer's owner needs to go to a site that only works in IE. I was hoping the windows updates might fix what was broken.

Believe me, I have been trying to fix IE! But after 10 hours on this project I was hoping that a reinstall would fix what is broken.

The computer is running XP Pro, SP2, IE 6.0.x 128-bit cipher strength.

The CD does contain an older version of XP and IE. The "/Q" switch seems to allow an installation without checking the version (at least for IE).

Yes, I tried the sfc /scannow from both run and from the command line. (If it can be run from the CD, maybe I should point the command to the file on the CD if it exists there.)

I am thinking also that reformatting the drive is neccesary. The CD that I had hoped to do a repair installation from, would not boot. I may need to buy a new copy of Windows. The Dell OS disk for the computer is long lost.

I am going to try to do the Windows updates through firefox first.

 

KauaiTim--Should I reinstall IE? How is that done?
Since sfc /scannow did not help, look at the "second" method in these two references
http://www.helpwithwindows.com/WindowsXP/howto-03.html
http://www.theeldergeek.com/repair_ie6.htm
P.S. What did happen when you ran sfc /scannow?

 

I reinstalled IE from the ie.inf file--but it does not help. It will not display secure web pages and blocks the activeX control needed to do Windows updates.

The sfc is really broken. When I try to execute it, a command line window flashes--but too fast for me to read anything. When trying to execute from the command line, it also does not execute properly. If I leave off the /scannow, it displays all the options, but sfc /scannow does not work by itself.

I am gathering what I need to do a reinstallation of Windows. It is a little hard because I do not have any original disks.

Thanks again.

 

KauaiTim--Can you get any command to run from Start|Run? Or is the problem limited to SFC?
I still think you should post an HJT log
http://www.windowsbbs.com/showthread.php?t=37074

 

Jim,

I think it is just SFC because I could get the sfc help on the command line, but I don't remember running any other commands. ...maybe I ran regedit, but I am not sure. I had to give the computer back to the owner for the holidays. I am still planning on formatting the disk and reinstalling windows. Thanks for your help.

Oh.. one of the first things I did was to create a HJT log. The only thing that looked troublesome was a logitech chat client that came bundled with a webcam. It installed mutiple 018 Extra Protocols. They all disappeared when I uninstalled the application. When I get the computer back, I may post the log.