Replies

If all you want to do is restart the BFE – Base Filtering Engine you could try RestoreBFE.exe from: http://download.bleepingcomputer.com…RestoreBFE.exe

Double-click on the downloaded file. It should only take a few seconds to run.
When complete, it will say .. “Done! Please check if BFE service is running now”

That’s good news Berton,

When I found out I could modify one of the about:config settings I went that route,

FF v33.0 Settings:
Rather than use the FF add-on I set my security.tls.version.min from about:config, the original setting was 0 and I changed it to 3, but had to switch back to 1 because of all places I couldn’t reach https://support.mozilla.org
0 means SSL 3.0 and higher is enabled, 1 means TLS 1.0 and higher is enabled, 2 means TLS 1.1, and higher is enabled.

The security.tls.version.max was originally 3 and I left it as is.

Source: Vulnerability in SSL 3.0 Could Allow Information Disclosure, v1.1 | SevenForums

if anyone else has problems with keeping SSL3 off usually because of add-ons or extensions try this:

[*]>Open about:config; Copy/paste/type, about:config , into your address bar >click on “I’ll be careful, I promise!
[*]>Copy/paste/type, security.tls , into the Search bar
[*]>Right click on security.tls.version.min >Modify >In the Enter Integer Value Box, change the 0 to a 1 >Click on OK.

Your config should look like this:
38385-wss-sll3-tls

[*]>Close the about:config Tab.
[*]>Restarting Firefox is your option.

Security.tls.version.*

SSLv3 will be disabled by default in Firefox 34, which will be released on Nov 25.

My pleasure!

Hi Joe,

The HDD crunching discussion will have to be for another time.

I like the ssllabs site, it gives a lot more info. I did see a few more, but they weren’t as good.

Arrrggh! avast matey! (couldn’t help it.)

Yep! I still have some pc problems from a few years ago that seem to defy logic, workarounds helped get runnin’ again but not a solid answer.

So, are you running okay, SSL3 stayin’ off? Time to mark this one solved, eh?

Steve

Hi Steve,

Please read my posts above for 11/2, particularly #14; they explain everything — McAfee was the culprit. I was just coming up for renewal, so it was easy to get rid of it now. That being said, the latest McAfee update didn’t work. Changing the registry key would have worked, but it would have killed SSL 3.0 for all programs on the computer, and McAfee would most likely have bitten the dust. But even now, post-McAfee, with SSL 3.0 apparently permanently off if I uncheck in Internet Options/Advanced, I still don’t see the SSL 3.0 registry key you mention — even after rerunning the FixIt and rebooting. But it doesn’t matter — things are working right.

Hi Joe,

Might be the fixit changes something deeper in the OS.

Don’t know if you’ve seen these two test sites: https://www.poodletest.com/ and https://www.ssllabs.com/ssltest/viewMyClient.html, they’ll test your browser(s) to see if they’re vulnerable to the SSL3 exploit. All you have to do is click on either link the site does the rest.

I did get rid of McAfee, but since my wife’s computer was already running Microsoft Security Essentials, I wanted something different (If one computer bricks from a bad definition update, you still have the other to recover.). I installed the free version of AVG Antivirus 2015, but immediately had to uninstall its e-mail scan feature, as it was seriously impeding Thunderbird. After that, all systems were go.

Good contingency plan, give Avast, or Avira a try in case AVG acts up some more. Just watch their surfing protection features they’ll give you problems like AVG did. I helped another member over at SevenForums figure out the HTTPS:// scanner Avast has was crashing his Firefox, but he was also running Iobit Advanced SystemCare.

I’m very impressed by the amount of detail you put into your posts for this problem, and very, very appreciative. Thank you very much again.

Joe

You’re welcome, I don’t know, I just start thinking about a problem and the thoughts start flowing.

The only reason I can think of why the fixit didn’t work on your machine is McAfee (MAC) blocked it. The technical page of the fixit, which is different than the fixit page, suggests in the workaround section that the fixit creates a registry Key to block SSL3 connections, and MAC is desperately trying to protect those connections because it needs them to operate.

You haven’t mentioned if you checked to see if you need the recent MAC update I mentioned in my last post:

I did ask my original poster HarryNack, if he checked to make sure if McAfee was up to date because there was a new update that came out yesterday on the 31st, and just maybe McAfee fixed this bug. As of this posting I haven’t heard back.

Check for any updates to McAfee, there was one released today: McAfee SuperDAT Update 7607 October 31, 2014 Download – TechSpot Update through program or this link if you’re not current, and test.

Source: Post #6 | IE10, SSLv3 setting keeps enabling.

If you have the most recent update and MAC still blocks any attempts to keep SSL3 switched off you may want to try manually adding that workaround key to your registry.

I’d be curious to know, and you should check the registry on your wife’s machine first since hers accepted the fixit.

Go to:

Code:

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocols

Open a registry Editor A quick way to get to Protocols is to type Schannel into the Find / Find next Box; Click on SCHANNEL to open, Click on Protocols to open.

You should at least see this:
38344-SchannelOld

If the fixit works as suggested you should see this:
38343-SchannelOld1

Then go to the same location in your registry, what do you see? I’d bet you don’t see the SSL3.0 Key.
I’d be willing to show you how to add that SSL3 Key, It’d be interesting to see how MAC would react to a manual input of the blocked protocol, my belief is it would stop working.
I’d tell you how if you want to try it yourself, but its a little tricky, the instructions only show how to change the value if the Key is already there, not the fact that you need to add two Keys, not just one.

The reason I’m working with you while you’re running MAC is it sounds like you have an investment in it and I don’t know how long you have until you $re-up the subscription to MAC$. There is a refund policy with two terms, 30 and 60 days: McAfee Security for Consumers Refund Policy Right of Cancellation If it’s worth it to you to cancel out I’d be willing to show you how to remove MAC, install Microsoft Security Essentials (MSE) and start Windows Firewall (WF). The worst part would be uninstalling MAC. I would follow both steps under Solutions, Remove thru Programs and Features, and run the MAC removal tool in case there are any leftovers. If you have Revouninstaller or CCleaner it wouldn’t hurt to check for any leftovers with them to make sure.

I’ve been using MSE since it came out and WF, and Ive been okay, knock on wood 38345-15_10_2, as long as you don’t go looking into every nook and cranny on the web, and think before you click you should be too.

Steve

p.s. This may sound corny, but Thanks for the thanks.

jkellyjrvt,

I’m helping a member over at Sevenforums that has McAfee, and has the same problem as you, his SSL3.0 option keeps being enabled, in his case IE10:

The problem is related to Mcafee virusscan plus.
SSL 3 option stays unchecked until i open the mcafee management console.

Source: Post #7 | IE10, SSLv3 setting keeps enabling. | SevenForums.com

He found a thread on the McAfee Forums that lead him to check, and verify if the behaviour still exists after McAfee knowing about the bug for 5years, yes it still exists, and yes, the thread is from 2009.

Read Andy_L’s response (fifth post down): Security Center changes IE security settings | McAfee.com

I did ask my original poster HarryNack, if he checked to make sure if McAfee was up to date because there was a new update that came out yesterday on the 31st, and just maybe McAfee fixed this bug. As of this posting I haven’t heard back.

Check for any updates to McAfee, there was one released today: McAfee SuperDAT Update 7607 October 31, 2014 Download – TechSpot Update through program or this link if you’re not current, and test.

Source: Post #6 | IE10, SSLv3 setting keeps enabling.

As for your wife’s machine exhibiting the same behaviour we’d need more information about her machine, such as;

[*]Do both machines share a network at home?
[*]If so, are they hard wired, or wi-fi, who is your internet service provider (ISP), what type of router?
[*]Is her machine fully updated (Windows)?
[*]Any third-party security programs?
[*]If she works, does she use her machine to connect to her place of employment’s servers?
[*]There is a Microsoft FixIt here: Microsoft security advisory: Vulnerability in SSL 3.0 could allow information disclosure: October 15, 2014 that might help.

Sudo15, touched on a program causing this, let me expand this to any type of add-on or extension, have you tried running her IE with add-ons/extensions disabled, then test?

Go to: Start >type/copy/paste Internet Explorer into the Search box >Select Internet Explorer (No Add-Ons) to open.

If the behaviour goes away you will have to add them back one at a time to see which one is problematic.

Thank you for the kind words, I can’t believe it myself sometimes. :p The hard part is understanding the problem, once that’s done the suggestions just start flowing.

You will find everything I posted at the Welcome to the Analytics Help Center Link, massaged them a bit to make it (I hope) easier to understand and picked out what I thought pertinent to your situation. If you’re having trouble finding something at that link let me know and I’ll point it out to you. We will delve deeper after you post you’re findings.

If you’re having a difficult time understanding something I will do my best to help you, one thing I will ask of you though is to be explicit in return. i.e. If you don’t want to try working with the cookies or cache and want to jump right to troubleshooting google analytics (GA) that’s okay, just let me know you made the jump.

Thanks for the response to the ad blockers.

Take your time there’s a lot there to absorb and check, I’ll be here when you get back.

Steve

You could try changing those settings, and you could also try clearing you cache and then before you try going to google analytics go back to the Privacy section, and to the right of the line that says “Keep Until:” you’ll see a “Show Cookies” button, click on it and a new dialog box will open where you can see cookies that are saved. Type in Google Analytics (GA) in the automatic search box to see if there are any in your profile, if there are, remove them. Then test the Analytics page.

The reason you’re checking for google analytics cookies is to make sure there are none left before you go and test the page otherwise FF may just use the older one.

You could also try adding the full google analytics page address to “Exceptions” the button located to the right of the “Accept cookies from sites” check-box. It would look something like this: https://www.google.com/analytics/; Click on allow for session, test the GA site. This way you won’t have to remove it manually for later FF sessions, just remember to restart FF before you go trying any other solutions.

Using GA I wouldn’t think you are, but I have to ask, are you running any type of ad blocker like or similar to ABP or Ghostery?

I do believe though, this cookies cache concern is all for naught, and your problem lies elsewhere. If after you try the above and you’re still not reading anything from the site you should start looking at GA itself.

If you have edit permission you’re first step should be: Checking Diagnostics messages

Then, Check your web tracking code set up, click on the first + sign at/or click on “See how to check the tracking status for a web property” do you see any of the four status messages, that may be affecting your property? If so which one(s)?, but go through all the tests on that page before you post back with your findings.

Under Check Real Time Reports there are two ways to look at no reports; There is no traffic or your tracking code is not working.

Under Use your browser’s View Page Source feature to find the tracking code, find it, and compare it with the one in your account if they differ drastically you will probably have to reinstall the code. If you’ve done customizations they will differ but the property number should still be the same.
You could try comparing it with the working code in your Chrome and/or IE, but I believe it would be different because of the different browser use.

GA can’t be reset you would have to create a duplicate profile and tell the tracking code to use the new profile. You would then have the option of starting to track in the new profile and delete the old profile. or tracking in both.

If Ga is the only site that is giving you problems while using FF, I feel your problem lies either with the tracking code or your profile.

This is the main GA help page: Welcome to the Analytics Help Center

Hi Linda,

Since FF22 FF automatically blocks all third-party cookies by default in order to protect users from tracking cookies; How do you have yours set? Go to Tools >Options >Privacy Section

Here’s how I have mine set, I’m also running 32.0.3:
38120-ffcookies

If you see something different, make sure you tell FF to Use Custom Settings, then accept cookies from sites. You may have to change the “accept” and or “keep until” parameters to suit google analytics.

If you’ve made changes, click on OK, if no changes use X or Cancel to back out.

A couple of more things to check are; How do you have “Clear history when FF closes” set? Its right below 3rd party cookies, If it’s not checked off don’t worry about it. If it is what do you have checked in its settings?

And, while in options go to the Advanced section the Network Tab, what is your current cached content and are you overriding it? It should be low since you’ve cleared it already.

Steve

Have you tried changing the default action of opening a file from double-click (DC) to single and then testing the single-click action on the files in your camera? Use Option One, I don’t believe it matters which Underline option you pick, but you can test to be sure: Single-Click or Double-Click to Open an Item

If that doesn’t work, follow the Tip box at this link: Troubleshoot camera connection problemsI didn’t have problems with either using a USB connection or popping the SD card from my camera and putting it in a card reader on my machine, but there may be something in the camera software that’s causing the DC problem. After a while I started liking, pulling the card instead of messing with the USB cord and, it removes the camera from the equation.

Here’s two links for your Cannon, if you would have given the model# I could have narrowed it down for you.
This one has manuals, if you don’t have one. Check the connection procedure make sure you’re following the sequence: Cannon Camera Owners Manuals

Same here about the model#: Maybe the camera software needs updated?

Are you tathraman? The Threads are eerily similar.

That’s what I did after I BSOD’d.

Now KB2993651 sits in my Updates queue awaiting September’s black patch Tuesday. I want to see if MS modifies it like they did for KB2982791.

See my links in post #6.

In my case no, I BSOD’d with the z-order problem.

See my post #17: Security Bulletin MS14-045 rereleased | SevenForums

Then: A look at my crash dump, post #24

As mentioned there, I’m waiting for a resolution.

Your welcome,

You never know, if something does crop up I’ll post it.

It seems the Chrome developers do not want users of its browser to be able to make changes like Firefox (FF) users can through extensions, i.e. add-ons.

I looked for something similar to FF’s: Classic Theme Restorer but couldn’t find anything.

After reading this: Can I change UI using Google Chrome’s API? It may be possible as the last poster there (Kinlan) said, to try to use the Override Pages feature for New tab Page, History and Bookmarks to make the changes you desire or Themes; The changes may already be in the theme.
As I use FF (31) with no Chrome install I was unable to explore override or themes to help you further, if I do happen to come across something I will post back.

In lieu of this, the only work-around that I found for the refresh button would be to tap the F5 key or right click in the browser window and click on Reload.