Websites displaying as blank pages. 19 replies

  • 1
  • 2

Please wait...

the1chaos VIP Member

I pretend to do stuff.

100,595 XP

16th January 2004

0 Uploads

9,047 Posts

0 Threads

#1 10 years ago

Hey everyone.

My laptop has, on it's own accord, started to display several websites (example: Welcome to About.com) as blank pages (or a 1*1px blank GIF). I've tried three different browsers (Firefox, Opera and IE), which all give the same results. All private data (cookies, temp internet files etcetera) have been cleaned several times.

Everything is up to date and clean, I've ran half a dozen virus and malware scans (Spybot, Ad-aware, Kaspersky and Hitman Pro), registry has been optimized and so-on. The websites did work previously, and continue to work on other computers which use the same router for internet access. They do, however, work when I use a proxy site to connect.

Any ideas on what could be causing it?

(Figured a HijackThis log might be useful, though I'm not certain - I won't pretend to be an expert. :p)

Spoiler: Show

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:29:49, on 5-2-2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16762) Boot mode: Normal

Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\mHotkey.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\BisonCam\BisonTrayIcon.exe C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe C:\WINDOWS\system32\WDBtnMgr.exe C:\ADVANC~1\wh_exec.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\ALCMTR.EXE C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe C:\Program Files\WhatPulse\WhatPulse.exe C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe C:\Program Files\Xfire\xfire.exe C:\Program Files\Microsoft SQL Server\MSSQL.2\OLAP\bin\msmdsrv.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\msftesql.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Yahoo! SearchBar Home Page R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Yahoo! R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Yahoo! R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [CHotkey] mHotkey.exe O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [BisonTrayIcon] C:\WINDOWS\BisonCam\BisonTrayIcon.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe O4 - HKLM\..\Run: [WheelMouse] C:\ADVANC~1\wh_exec.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [WhatPulse] C:\Program Files\WhatPulse\WhatPulse.exe O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe O8 - Extra context menu item: Add to Banner Ad Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

-- End of file - 7746 bytes

Thanks in advance, everyone.




Dark Saint

How many dogs are Pb'd?Maybe 2

50 XP

30th April 2004

0 Uploads

8,040 Posts

0 Threads

#2 10 years ago

have your security settings changed on your browsers? It may only include a few sites, i had this happen a year back where a couple sites ( including this one) were added to the " Naughty " list in FF.




the1chaos VIP Member

I pretend to do stuff.

100,595 XP

16th January 2004

0 Uploads

9,047 Posts

0 Threads

#3 10 years ago

I don't believe I did, but even if I have, it would only be in Firefox. I rarely use IE or Opera, I only used them to check if it was a browser problem.

Edit: Before I forget, on advice from Sheep I also tried to telnet the site in question, but I couldn't establish a connection. It almost seems like the server has blacklisted my IP, but other computers using the same IP work fine. The only thing I can think of that I've recently changed on my system is windows updates. (Which have a record of screwing up my laptop, admittedly. One update for example killed off my ability to use TeamSpeak/Ventrillo.)




Sgt. D. Pilla

Uber Geek

50 XP

23rd October 2007

0 Uploads

3,473 Posts

0 Threads

#4 10 years ago

Flush the DNS. Start > Run > CMD > ipconfig /flushdns

My internet does it sometimes, only Chrome is good enough to tell me its a DNS issue, so I flush my DNS and all is well.

Another cause is the arp cache, If you clear the arp cache it could also help the situation. To do this... Start > Run > CMD > netsh interface ip delete arpcache

If you run Vista or XP you'll need to run as administrator

Another possible reason is your router. On occasion while I remain connected to the internet, my Wireless router will drop the connection to the modem, giving out a false connection status. Access your router, and click "Disconnect" then "Connect" to refresh the connection to the modem, if that fails take the Ethernet cable from the modem out, and plug it back in, do the same for the other end of the cable aswell.




the1chaos VIP Member

I pretend to do stuff.

100,595 XP

16th January 2004

0 Uploads

9,047 Posts

0 Threads

#5 10 years ago

First off, thanks for your help.

I just tried your suggestion Pilla, but I can't seem to flush my DNS. I did get an error about a month ago (slightly before this problem first started to show up on one of the sites, which I figured wasn't worth fretting over) when I tried to reset my connection to my wireless. Since I did have a stable network connection and no real errors were occurring I paid it no heed.

The error I'm getting translates to "Cannot clear DNS-conversioncache (?): function has failed during execution". The command you gave to clear the arp cache did work, but had no effect.

Edit: I just tried to get it to display (ipconfig /displaydns), which isn't working either. Not sure if that's significant, but I figured I'd mention it.




Sgt. D. Pilla

Uber Geek

50 XP

23rd October 2007

0 Uploads

3,473 Posts

0 Threads

#6 10 years ago

In that case check the DNS service is still running. Start > Run > CMD > net stop dnscache Start > Run > CMD > net start dnscache

Again you'll need elevation in Vista to do this. Further you may want to check over your hosts file. C:\Windows\System32\Drivers\Etc\hosts

Please post the contents of the hosts file here, It should really only have 127.0.0.0 and 127.0.0.1 in there. If you run Spybot S&D uninstall it, then post the contents of the hosts file.

The contents of my hosts file is as follows...

127.0.0.1 localhost ::1 localhost 127.0.0.1 activate.adobe.com

Heh, ignore the adobe one though ;)




the1chaos VIP Member

I pretend to do stuff.

100,595 XP

16th January 2004

0 Uploads

9,047 Posts

0 Threads

#7 10 years ago

Apparently the DNS client-service wasn't running, and it's giving me an error when I try to start it.

System error 1058. Cannot start the service because it is turned off or because it does not have any activated devices connected to it.

I've actually already checked my hosts file in a moment of "hey, maybe that's it", and it's clean. But for the sake of pure confirmation, I'll post it anyway.

Spoiler: Show

# Copyright (c) 1993-1999 Microsoft Corp. # # Dit is een voorbeeld HOSTS-bestand dat wordt gebruikt door Microsoft TCP/IP for Windows. # # Dit bestand bevat de toewijzingen van IP-adressen naar hostnamen. Elke vermelding # moet op een afzonderlijke regel staan. Het IP-adres dient in de eerste kolom te worden # geplaatst, gevolgd door de bijbehorende hostnaam. Het IP-adres en de hostnaam dienen # gescheiden te zijn door ten minste één spatie. # # Daarnaast kunnen opmerkingen (zoals deze) worden toegevoegd op extra # regels of gevolgd door de computernaam, voorafgegaan door een #. # # Bijvoorbeeld: # # 102.54.94.97 rhino.acme.com # bronserver # 38.25.63.10 x.acme.com # x clienthost

127.0.0.1 localhost

(Oh, and I'm running XP as admin, so you don't have to worry about Vista stuff.)

Edit:

Well, I figured out the service is turned off, and right now I'm looking at it under Computer Managements' Services tab, but considering I'm not entirely sure what I'm doing (especially since the "start" option is grayed out) I've not made any actual changes yet.




Sgt. D. Pilla

Uber Geek

50 XP

23rd October 2007

0 Uploads

3,473 Posts

0 Threads

#8 10 years ago

Hum. Thats a nice error on the service you have there. Start > Run > Services.msc Right Click "DNS Client" click Dependencies, Write down or in some otherway record the dependencies. Then go back through the services list and ensure all the dependent services are started and set to automatic.

Further, the services dependencies tab shows more then just system services needed to run another service. The way to know which services are required is to look for ones with the same icon as the services window itself (Small Gears)

Next, Open Device Manager (Right Click 'My Computer > Properties > Hardware > Device Manager) and uninstall all your network interfaces but the 1394 interface, instead disable that. If it asks if you want to keep the drivers say yes, you do want to keep them. Reboot, then let the system reinstall the adapters. Try starting the system service again

especially since the "start" option is grayed out

It should be greyed out unless you select a service. Once you've clicked on a service it should turn black.

Still on the properties of the DNS Client service, under the logon tab ensure it has a logon account. It should be set as Network Service, I'm not sure what the default password is for these accounts, but if its not Network Service, or isn't filled in, Post back again with what account its mean't to log on as. If its not filled in at all, use the default Administrator account




the1chaos VIP Member

I pretend to do stuff.

100,595 XP

16th January 2004

0 Uploads

9,047 Posts

0 Threads

#9 10 years ago

Right. Just as confirmation, before I screw something up beyond belief.

After checking the DNS service and it's dependencies, there is only one; it's dependent on "Driver for TCP/IP-Protocol" (IPSEC driver). I've set that to automatic, and enabled it. The rest of the dependencies tab is empty. I've done the same for the DNS service itself.

This did allow me to flush the DNS, though the sites still aren't working. (I figured I'd check before rebooting.)

Under the device manager I have three network options, one of which was already disabled (1394 Network Card #2). The other two are: 1) Intel(R) PRO/Wireless 3945ABG Network Connection 2) Realtek RTL8169/8110 Family Gigabit Ethernet NIC

You want me to uninstall these two?

(I've made mistakes in the past concerning with uninstalling drivers, so I figured I'd completely confirm it first.)




Sgt. D. Pilla

Uber Geek

50 XP

23rd October 2007

0 Uploads

3,473 Posts

0 Threads

#10 10 years ago

Yep, thats right. If your hesitant make a System Restore point first. "Driver for TCP/IP-Protocol" I believe is a Windows feature, in addition to the IPSEC System Service.

Which gives me another fall back point if need be :)

FYI, The 1394 Adapter is simply the firewire port. Firewire can do internet, For optimization reasons its best to disable this useless feature, You can still use Firewire, just not for networking. (You'll never see a Server with it enabled)

-- Its strange though, We've managed to get DNS Service running and flushing, and the arp cache has been flushed, but still no go. Check Internet Settings in control panel for any set proxys.

Control Panel > Internet Settings > Connections > Lan Settings > !ONLY! "Automatically Detect Settings" should be checked. *Hope my memory serves me well, I run Vista you see*




  • 1
  • 2