Page 1 of 4 123 ... LastLast
Results 1 to 15 of 49
  1. #1
    3 Star Lounger
    Join Date
    Dec 2002
    Location
    Montello, Wisconsin, USA
    Posts
    205
    Thanks
    2
    Thanked 0 Times in 0 Posts

    msn sign in (xp-home sr1)

    This one puzzles me. I use Guard IE which deletes the cookies, temp internet files, and history each time I exit IE-6. It seems to work. But I noticed on my XP machine, when I return to MSN, even a week and 7 cold boots later, it knows my user name. On the 98 2nd ed machines it does not. I tried using Spider and that made no difference either. Any idea how that site does that? I don't want it to. Thanks.

  2. #2
    Banned Member
    Join Date
    Jul 2002
    Location
    Newport Richey, Florida, USA
    Posts
    2,149
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: msn sign in (xp-home sr1)

    Are you saying that it Auto completes your user name and password?

  3. #3
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Long Beach, California, USA
    Posts
    1,912
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: msn sign in (xp-home sr1)

    Agreed with cowboy. This is AutoComplete for User Names and Passwords. This is not related to index.dat files or History. You can set this on the Internet Options | Content tab | AutoComplete dialog box.

  4. #4
    3 Star Lounger
    Join Date
    Dec 2002
    Location
    Montello, Wisconsin, USA
    Posts
    205
    Thanks
    2
    Thanked 0 Times in 0 Posts

    Re: msn sign in (xp-home sr1)

    No, it's not auto complete. When I click the sign in button the box opens with one of my user names already filled in. The other user name is available in a drop down box. The password box is empty. Auto complete does just that, complete something I start to type. This is pre filled in like a cookie would do. But it must be stored somewhere other than cookies, history, or temporary internet files. I will search the registry and see if it is in there somewhere.

  5. #5
    3 Star Lounger
    Join Date
    Dec 2002
    Location
    Montello, Wisconsin, USA
    Posts
    205
    Thanks
    2
    Thanked 0 Times in 0 Posts

    Re: msn sign in (xp-home sr1)

    Now I am really stumped. Just now, after booting fresh from yesterday, I went to the msn site and clicked sign in. It not only had my user name but just went directly to logged in without my doing anything. And all cookies ect were deleted last night using guard IE, IE6 itself, spider, and manually with windows explorer. I just did a search of the registry for my user name and came up with nothing. I then did a file search for my user name contained in files, including system and hidden files and again turn up nothing. It's got to be here somewhere. Otherwise how would they know it was me? Well maybe someone in the lounge knows.

  6. #6
    Silver Lounger Bruce K's Avatar
    Join Date
    Apr 2002
    Location
    Phoenix, Arizona, USA
    Posts
    1,876
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: msn sign in (xp-home sr1)

    Do you mean like below?
    Attached Images Attached Images

  7. #7
    3 Star Lounger
    Join Date
    Dec 2002
    Location
    Montello, Wisconsin, USA
    Posts
    205
    Thanks
    2
    Thanked 0 Times in 0 Posts

    Re: msn sign in (xp-home sr1)

    Very similar. But mine says sign in to msn groups. But basicly the same type box yes. But now the only way I can get the box is to sign out and then click sign in. Otherwise it logs me in automatically. And I don't have the auto sign in box checked.

  8. #8
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Long Beach, California, USA
    Posts
    1,912
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: msn sign in (xp-home sr1)

    You are stumped because you don't want to hear the truth. Those are AutoComplete entries. You will not find them directly in the registry -- they are encrypted. Disable AutoComplete for user names and passwords and see what happens. If that does not work, rename "pstores.exe" to "pstores.exe.old" and try it again! (Eh, if XP will allow you -- it might not!)

    If pstores and AutoComplete are disabled, this will not work.

    This is NOT Cookies, this is NOT History, this is NOT the TIF, this is NOT any index.dat file...

    Want me to prove this ONE more way? Open regedit and go to this key:

    HKEY_LOCAL_MACHINESoftwareMicrosoftProtected Storage System Provider

    Rename that key with a minus sign (-) in front of Protected. Now try it again. Does it still find your User Name?

    Usernames and passwords (and all other AutoComplete entries for IE) are stored and retrieved by pstores.exe from THIS section of the registry. Each user has a different key.

  9. #9
    Silver Lounger Bruce K's Avatar
    Join Date
    Apr 2002
    Location
    Phoenix, Arizona, USA
    Posts
    1,876
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: msn sign in (xp-home sr1)

    Hi, R2 ~

    Nevermind JC there <img src=/S/spook.gif border=0 alt=spook width=15 height=15>

    I had a similar issue with .NET Passport a while back and they were unable to provide a definitive answer nor were they able to point me to a file or key held locally.

    R2, there is no 'HKEY_LOCAL_MACHINESoftwareMicrosoftProtected Storage System Provider' or 'pstores.exe' on a thorough search of my system. I did, however, find 'pstorec.dll' and 'pstorsvc.dll' which seem to be an integral component of Protected Storage, yet after overriding WFP and deleting them both, no effect was encountered when trying again.

    Your thoughts?

  10. #10
    3 Star Lounger
    Join Date
    Dec 2002
    Location
    Montello, Wisconsin, USA
    Posts
    205
    Thanks
    2
    Thanked 0 Times in 0 Posts

    Re: msn sign in (xp-home sr1)

    Thanks Bruce. I contacted Microsoft and I'm waiting to see what they say. No matter what I do, I can't duplicate the problem (or feature) on my 98 2nd ed computers. So it must have something to do with XP. I'll wait and see if anyone else has any suggestions I can try, and what Microsoft says.

  11. #11
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Long Beach, California, USA
    Posts
    1,912
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: msn sign in (xp-home sr1)

    I always get up on the wrong side of the bed and I am too ignorant to be bothered by comments. <img src=/S/smile.gif border=0 alt=smile width=15 height=15>

    XP must have moved them or renamed them. Regardless, the system must work the same way. Like it or not, those are AutoComplete User Names --or, as Bruce's image demonstrates, Email Address Accounts. There are two forms of AutoComplete -- "in-line" or "append" (which finishes words as you type them), and the standard drop-down AutoComplete.

    Getting any information about this from Microsoft is exceedingly unlikely. There is very little information at all about the Protected Storage System and "pstores" on all of the microsoft.com site. It is considered a sensitive area...

    Pstores.exe is the executable program, and Pstorec.dll holds the "encryption/de-encryption" coding. Is is possible that XP renamed pstores.exe? Yes, I guess, but they apparently did not remane the application extensions (pstorec.dll and pstorsvc.dll). Perhaps the file is just "hidden". Bruce, do you have "hidden" files visible? I was afraid XP would "protect" those files and those registry keys... Too bad. That makes it difficult to prove my point. <img src=/S/frown.gif border=0 alt=frown width=15 height=15>

    Bruce, there NEEDS to be a "Protected Storage System Provider" (PSSP) key in your registry somewhere. Could XP have moved that? I guess, but I don't see why. Also, perhaps if you NEVER, EVER turned on AutoComplete, then WinXP would never bother to create the key... I see this as unlikely, because on Win9x systems the key contains two "default" storage sub-keys, *Default* and *Local Machine*. Then, each and every user is given a sub-key. Pstores uses these keys to store ALL your potentially 'sensitive' AutoComplete data -- user names, passwords, form entries, etc.

    [I subsequently note that it may be under HKEY_CURRENT_USER in WinXP -- instead of HKLM. So, perhaps XP simply moved each users PSSP keys to the user section of the registry...]

    The PSSP user keys hold a Data and Data2 sub-keys, The Data key is the one holding most of the AutoComplete information. Email Account UserNames and Passwords are stored the "220d5cc1... - Identification - INETCOMM Server Passwords" sub-key. Forms data, Web page User Names and Passwords are stored in "e161255a... - Internet Explorer" sub-key. The numbers may be different for XP, but the 'keys' need to be there. Look in the Internet Explorer sub-key and drill down to the "http..." section. UserNames and Passwords are generally kept there. There is also a third sub-key that also holds "Protected SIte" passwords -- and MSN may fall into this category. The key is identified as "89c39569... - IdentityMgr - Identities - IdentitiesPass". You may want to look for MSN in there.

    Could the MSN site be doing something unique?? Certainly. Could it be using the horrible "Passport" technology? I guess, but most people have shunned that -- especially after the Wallet fiasco. I would not put Microsoft passed using it, but this function has been the realm of AutoComplete and Pstores for a long time...

    There is a program that lets you SEE into the Password Storage system. It divides the three storage areas I described above into "Outlook Express Passwords", "AutoComplete Passwords", and "Password-Protected Sites". I would be most interested in finding out what you guys see using that tool.

    It is available here: Protected Storage PassView

  12. #12
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Long Beach, California, USA
    Posts
    1,912
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: msn sign in (xp-home sr1)

    I was able to get my little hands on a WinXP box -- guess what? No pstores.exe!

    And the PSSP key IS under HKCU. Instead of user names the sub-keys are those user 'numbers'.

    I did not have full access to the box -- nor did I have time to re-set this -- but it may be that the pstores.exe function has been taken over by "services.exe". I will look into this further...
    ________________________________

    Someone with WinXP: please check this registry key:

    HKEY_LOCAL_MACHINESystemCurrentControlSetServicesP rotectedStorage

    On Win9x this points to "pstores.exe" in two places:

    ...ParametersImagePath=C:WINDOWSSYSTEMPSTORES.EXE
    ...S2pstores.exe

    I would be most interested in seeing those keys in WinXP...
    _______________________________________________

    More info: WinXp and Win2K don't use 'pstores.exe' -- instead they run the "Protected Storage Service" -- probably a sub-component of "Services.exe"...

  13. #13
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Long Beach, California, USA
    Posts
    1,912
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: msn sign in (xp-home sr1)

    Reply to self. Yep, "Services.exe" seems to have taken the place of "pstores.exe" in Win2k-XP. Here is the registry entry:

    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesP rotectedStorage
    ImagePath=%SystemRoot%system32services.exe

    You can view the list of the various services that are running by typing "services.msc" in a Run box. On the list you will find Protected Storage component.
    Attached Images Attached Images

  14. #14
    5 Star Lounger
    Join Date
    Dec 2002
    Location
    Perth, Western Australia, Australia
    Posts
    730
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: msn sign in (xp-home sr1)

    Thanks <img src=/S/cranky.gif border=0 alt=cranky width=18 height=25> ! <img src=/S/laugh.gif border=0 alt=laugh width=15 height=15> Your PSP link let me get rid of a stored OL Express password that had been left hanging around. Now it comes up clean, the way I prefer it (especially with such utilities around <img src=/S/wink.gif border=0 alt=wink width=15 height=15> ).
    <font face="Comic Sans MS" color="blue">TimOz</font>
    <img src=/S/flags/Finland.gif border=0 alt=Finland width=30 height=18> <img src=/S/flags/Australia.gif border=0 alt=Australia width=30 height=18>

  15. #15
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Long Beach, California, USA
    Posts
    1,912
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: msn sign in (xp-home sr1)

    I have to wonder if the reason that un-checking the AutoComplete boxes does NOT work is because there is no check for "Email Addresses" -- it is only Web Address, Forms, and User names and passwords on forms.

    If Jrclen's drop-down list is EXACTLY the one that Bruce images above, you will note those are Email Addresses and not necessarily "User Names". MSN seems to use your Email Address to identify you (I never use MSN, so I have to rely on Bruce's image). The PSPV program would idenify these as "Resource Type = Outlook Express".

    If unchecking the AutoComplete boxes does not stop this behavior, then IE must treat Email Addresses separately. If that is the case, I know of no setting to "Disable AutoComplete Email Addresses". <img src=/S/frown.gif border=0 alt=frown width=15 height=15> You can use PSPV to delete the addresses, but I don't know how to stop IE from dropping them down.

Page 1 of 4 123 ... LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •