Page 1 of 2 12 LastLast
Results 1 to 15 of 25
  1. #1
    New Lounger
    Join Date
    May 2011
    Posts
    16
    Thanks
    4
    Thanked 0 Times in 0 Posts

    SSL3.0 won't stay off

    I'm running IE11 on Windows 7 Home Premium. To avoid POODLE problems, I unchecked "Use SSL3.0." When my machine wakes up from hibernation, "Use SSL3.0" is re-checked. Nothing seem to stop this behavior. It survives opening and closing the browser, hitting "Clear SSL state" and rebooting. Any thoughts on what's happening?

  2. #2
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,593
    Thanks
    5
    Thanked 1,059 Times in 928 Posts
    Is your user account a member of the administrator group?

    Have you tried running IE with add-ins disabled?

    Are you running any third party security software which could be interfering?

    Joe

  3. #3
    New Lounger
    Join Date
    May 2011
    Posts
    16
    Thanks
    4
    Thanked 0 Times in 0 Posts
    Yes
    Yes
    Just McAfee AntiVirus

  4. #4
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,593
    Thanks
    5
    Thanked 1,059 Times in 928 Posts
    Have you tried disabling McAfee, making the change, & then re-booting?

    Joe

  5. #5
    New Lounger
    Join Date
    May 2011
    Posts
    16
    Thanks
    4
    Thanked 0 Times in 0 Posts
    I will try that, but it's not likely to work. The same behavior occurs on my wife's computer which administratively runs Microsoft Security Essentials, IE11 and Windows 7 Home Premium. Hers never sees hibernation--she just uses it constantly for a short period and then completely shuts it off. The next time she turns it on, "Use SSL 3.0" is re-checked.

  6. #6
    Super Moderator
    Join Date
    Aug 2012
    Location
    Durham UK
    Posts
    6,640
    Thanks
    147
    Thanked 883 Times in 844 Posts
    Have you tried resetting IE to full defaults, rebooting then trying again ?

  7. #7
    New Lounger
    Join Date
    May 2011
    Posts
    16
    Thanks
    4
    Thanked 0 Times in 0 Posts
    Gave it one more try. Closed IE11, shut down McAfee, opened IE11 with no add-ons, unchecked "Use SSL3.0" and rebooted. When boot was finished "Use SSL3.0" was re-checked.

  8. #8
    New Lounger
    Join Date
    May 2011
    Posts
    16
    Thanks
    4
    Thanked 0 Times in 0 Posts
    On wife's computer, IE11 has never been changed from full defaults, and problem still occurs there. "Use SSL3.0" IS one of the IE11 defaults, but if you de-select it, why does it keep coming back upon reboot? Sounds like IE11 itself might not be retaining its configuration information for some reason.

  9. #9
    Super Moderator
    Join Date
    Aug 2012
    Location
    Durham UK
    Posts
    6,640
    Thanks
    147
    Thanked 883 Times in 844 Posts
    I only use IE 10 but perhaps other IE 11 users could chip in if they've had the same problems, but as it affects both yours and your wife's computers perhaps you each have a program installed - although I can't really see how that would affect a browser.

    Nonetheless, see if it stays unchecked with a clean boot.

    If it was just one computer then I would advise uninstalling IE 11 from Installed Updates - check to see if it stayed unchecked in the reverted version then if it did, reinstall IE 11 either through WUs or a direct download http://www.microsoft.com/en-gb/downl...1-details.aspx

    If you do want to try the reinstall then reset IE 11 to defaults first before uninstalling.
    Last edited by Sudo15; 2014-10-24 at 13:18.

  10. #10
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    4,753
    Thanks
    171
    Thanked 652 Times in 575 Posts
    Reset Internet Explorer settings (Internet Options, Advanced, bottom right).

    Brucew

  11. #11
    WS Lounge VIP Calimanco's Avatar
    Join Date
    Dec 2009
    Location
    UK
    Posts
    722
    Thanks
    1
    Thanked 145 Times in 131 Posts
    This may be asking the obvious. After unticking SSL3.0, did you click on apply?

  12. #12
    Star Lounger Anak's Avatar
    Join Date
    Feb 2010
    Location
    Central Pa.
    Posts
    54
    Thanks
    3
    Thanked 8 Times in 7 Posts

    I hope this offers some insight.

    jkellyjrvt,

    I'm helping a member over at Sevenforums that has McAfee, and has the same problem as you, his SSL3.0 option keeps being enabled, in his case IE10:
    The problem is related to Mcafee virusscan plus.
    SSL 3 option stays unchecked until i open the mcafee management console.

    Source: Post #7 | IE10, SSLv3 setting keeps enabling. | SevenForums.com
    He found a thread on the McAfee Forums that lead him to check, and verify if the behaviour still exists after McAfee knowing about the bug for 5years, yes it still exists, and yes, the thread is from 2009.

    Read Andy_L's response (fifth post down): Security Center changes IE security settings | McAfee.com

    I did ask my original poster HarryNack, if he checked to make sure if McAfee was up to date because there was a new update that came out yesterday on the 31st, and just maybe McAfee fixed this bug. As of this posting I haven't heard back.

    Check for any updates to McAfee, there was one released today: McAfee SuperDAT Update 7607 October 31, 2014 Download - TechSpot Update through program or this link if you're not current, and test.

    Source: Post #6 | IE10, SSLv3 setting keeps enabling.
    As for your wife's machine exhibiting the same behaviour we'd need more information about her machine, such as;

    Sudo15, touched on a program causing this, let me expand this to any type of add-on or extension, have you tried running her IE with add-ons/extensions disabled, then test?

    Go to: Start >type/copy/paste Internet Explorer into the Search box >Select Internet Explorer (No Add-Ons) to open.

    If the behaviour goes away you will have to add them back one at a time to see which one is problematic.
    Last edited by Anak; 2014-11-01 at 14:24. Reason: Correcting Grammar.

  13. The Following User Says Thank You to Anak For This Useful Post:

    jkellyjrvt (2014-11-02)

  14. #13
    New Lounger
    Join Date
    May 2011
    Posts
    16
    Thanks
    4
    Thanked 0 Times in 0 Posts
    Hi Anak,

    Thanks for your response. I had pretty much given up hope. I went to Microsoft Community and posted the problem -- got an uninstall/reinstall windows and why-do-you-want-to-do-this-anyway type response.

    Per your questions, both computers run 64-bit Windows 7 and IE11. My Dell desktop is Ethernet-connected; my wife's Toshiba Satellite laptop is Wi-Fi connected through a Netgear WNR-2500 wireless router. That's the extent of the "home network" -- no sharing between computers. My wife does not log into any work network. HughesNet satellite service is the ISP, brought in through an HN7000S modem -- a generous 1.5Mbs service for a mere $70/month. (I will switch to a VermontTel 4G/LTE internet service -- a 25-50Mbs service for only $25/mo. -- when it becomes available, scheduled for the end of the year.)

    Both machines are fully updated through Microsoft and I run Secunia PSI 3.0 on both. My machine uses McAfee Security Center (anti-virus, firewall, etc.); my wife runs Microsoft Security Essentials and Windows Firewall. Both machines were tested with all IE add-ons and extensions disabled, with no apparent effect.

    The Microsoft FixIt had no effect on my machine, but seems to have solved the problem on hers, whereas just changing the SSL 3.0 setting in Advanced Internet Options on hers did not seem to work.

    Opening the McAfee Security Center did not immediately change the SSL 3.0 setting on mine. But about 15 minutes after I closed it out, SSL 3.0 was again rechecked. This time no hibernation or reboot was involved.

    Essentially, every program on my wife's computer is also on mine, but I have additional programs, some of which are older and could be at fault here.

    Unfortunately, since the problem has appeared primarily after hibernation or reboot, tracking down the offender would be a rather ponderous problem, and just doing a general disable of SSL 3.0 within windows (not just IE11) might disable whatever program was at fault. I'm hoping that, whenever Microsoft completely disables SSL 3.0 in IE11, it will take hold there and not reset spontaneously. That would at least provide surfing protection. Hopefully, whatever program might be causing the problem might eventually be updated as well, but with some of the older ones, that's not likely.

    Just on the chance that McAfee is the cause, I'm seriously tempted to strip McAfee off my machine and use Microsoft Security Essentials and Windows Firewall. The McAfee Security Bulletins you cited are truly frightening. With 100+ McAfee products involved, it could be a long catch-up process -- particularly if you use their history in tracking down this "bug" since 2009 as a guide.

    Anyhow, thanks again for your help. I'll let you know if I find out anything else.

    Joe
    Last edited by jkellyjrvt; 2014-11-02 at 15:15.

  15. #14
    New Lounger
    Join Date
    May 2011
    Posts
    16
    Thanks
    4
    Thanked 0 Times in 0 Posts
    Sometimes it's so easy....Regarding the above post, opening the McAfee Security Center does not change does not change the SSL 3.0 setting...but opening the McAfee Security Center and clicking on About immediately rechecks "Use SSL 3.0". Culprit found!!! You were absolutely right.

  16. #15
    Star Lounger Anak's Avatar
    Join Date
    Feb 2010
    Location
    Central Pa.
    Posts
    54
    Thanks
    3
    Thanked 8 Times in 7 Posts
    The only reason I can think of why the fixit didn't work on your machine is McAfee (MAC) blocked it. The technical page of the fixit, which is different than the fixit page, suggests in the workaround section that the fixit creates a registry Key to block SSL3 connections, and MAC is desperately trying to protect those connections because it needs them to operate.

    You haven't mentioned if you checked to see if you need the recent MAC update I mentioned in my last post:
    I did ask my original poster HarryNack, if he checked to make sure if McAfee was up to date because there was a new update that came out yesterday on the 31st, and just maybe McAfee fixed this bug. As of this posting I haven't heard back.

    Check for any updates to McAfee, there was one released today: McAfee SuperDAT Update 7607 October 31, 2014 Download - TechSpot Update through program or this link if you're not current, and test.

    Source: Post #6 | IE10, SSLv3 setting keeps enabling.
    If you have the most recent update and MAC still blocks any attempts to keep SSL3 switched off you may want to try manually adding that workaround key to your registry.

    I'd be curious to know, and you should check the registry on your wife's machine first since hers accepted the fixit.

    Go to:
    Code:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols
    Open a registry Editor A quick way to get to Protocols is to type Schannel into the Find / Find next Box; Click on SCHANNEL to open, Click on Protocols to open.

    You should at least see this:
    SchannelOld.JPG

    If the fixit works as suggested you should see this:
    SchannelOld1.JPG

    Then go to the same location in your registry, what do you see? I'd bet you don't see the SSL3.0 Key.
    I'd be willing to show you how to add that SSL3 Key, It'd be interesting to see how MAC would react to a manual input of the blocked protocol, my belief is it would stop working.
    I'd tell you how if you want to try it yourself, but its a little tricky, the instructions only show how to change the value if the Key is already there, not the fact that you need to add two Keys, not just one.

    The reason I'm working with you while you're running MAC is it sounds like you have an investment in it and I don't know how long you have until you $re-up the subscription to MAC$. There is a refund policy with two terms, 30 and 60 days: McAfee Security for Consumers Refund Policy Right of Cancellation If it's worth it to you to cancel out I'd be willing to show you how to remove MAC, install Microsoft Security Essentials (MSE) and start Windows Firewall (WF). The worst part would be uninstalling MAC. I would follow both steps under Solutions, Remove thru Programs and Features, and run the MAC removal tool in case there are any leftovers. If you have Revouninstaller or CCleaner it wouldn't hurt to check for any leftovers with them to make sure.

    I've been using MSE since it came out and WF, and Ive been okay, knock on wood 15_10_2.gif, as long as you don't go looking into every nook and cranny on the web, and think before you click you should be too.

    Steve

    p.s. This may sound corny, but Thanks for the thanks.
    Last edited by Anak; 2014-11-03 at 15:36. Reason: Added p.s.

  17. The Following User Says Thank You to Anak For This Useful Post:

    jkellyjrvt (2014-11-03)

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •