PDA

View Full Version : Spybot 1.6.2 Immunization and IE8 64 bit



cx166
2012-10-27, 01:36
I reinstalled my os (Win XP 64 bit) and now IE8 64 bit's Secure Domains immunization fails partially (IE8 32 bit immunization works fine), already tried deleting Sec. Domains-folder from registry and trying again but no luck, still 1035 Sec. Domains not immunizated.

Other active security softwares are Comodo Internet Security 5.10 and Spywareblaster, Malwarebytes Scanner I use once a week.

I use IE8 only on 1 website so not a big deal but still would be nice to have full immunization.

Before reinstallation of os no problems with immunizations.

spybotsandra
2012-10-29, 12:45
Hello,

1. Did you open Spybot with a right click and choose "run as administrator/take ownership" (www.safer-networking.org/faq/how-can-i-get-administrator-rights-under-windows-vista-or-windows-7/)?

2. Did you disable your other security applications during the immunization?

3. Did you close the browser before performing the immunization?

Best regards
Sandra
Team Spybot

cx166
2012-10-30, 02:51
Hello,

1. Did you open Spybot with a right click and choose "run as administrator/take ownership" (www.safer-networking.org/faq/how-can-i-get-administrator-rights-under-windows-vista-or-windows-7/)?

2. Did you disable your other security applications during the immunization?

3. Did you close the browser before performing the immunization?

Best regards
Sandra
Team Spybot

1. I'm only user so I'm admin. Not sure if I 1st time installed spybot as safe mode admin not normal admin since that was ~2 years ago.

2. On 3rd try I disabled everything besides firewall from Comodo IS but no difference.

3. Yes, I have always closed browsers before immunization.

Immunization error-log says that TInternetExplorerSecureDomainImmunizer:Could not open for immunization: \SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\ and list of sites.

Also uninstalled and reinstalled spybot w/o difference.

spybotsandra
2012-10-30, 12:08
Hello,

That sounds like any program is blocking the access to the domains for the immunization.
Which other security software do you run besides Comodo?

Best regards
Sandra
Team Spybot

cx166
2012-10-30, 16:42
only active is comodo and spywareblaster and mbam are passive.

cx166
2012-11-01, 04:56
update: I got everything immunized in safe mode (as inistructed in stickied topic) but when I returned to notmal mode IE8 32/64bit had got sec. domains error and then I went back to safe mode and undid all immunizations and redid those and all went perfectly and then went back to normal mode and now IE8 64bit has sec. domains error again even when I left safe mode everything was immunized. Might try safe mode again but after 2 attemptsd on't think it works.

cx166
2012-11-06, 00:06
updare: after latest updates IE 32 bit and IE 32/64 bit and IE 64 bit have failed immunizations in domains (1 each comibination and user) besides IE 64 bit's failed secure domains immunization.

Lancer
2012-11-06, 01:33
Hi cx166,

When you disable CIS Defense+ use the check box in d+ settings rather than the slider. (The slider leaves some HIPS functions active even in Disabled mode.) Reboot, and try immunization again.

Good Luck!
Lancer

cx166
2012-11-06, 21:12
Hi cx166,

When you disable CIS Defense+ use the check box in d+ settings rather than the slider. (The slider leaves some HIPS functions active even in Disabled mode.) Reboot, and try immunization again.

Good Luck!
Lancer

tried and no effect, still 1045 failed immunization.

cx166
2012-11-07, 00:40
update: got other immunization to work but IE 64 bit has 1045 failed immunization in secured domains, uninstalled spybot via safe mode admin and reinstalled and only effect was that other IEs got all immunizated except IE 64 bit.

what's weird that as safe mode admin I can get everything immunizated but if I do re-check then IE 64 bit gets 1045 un-immunizated sec. domains so sb can't immunize those.

cx166
2012-11-21, 13:56
Same problem as before with 1.6.2, SB2 can't immunize secure domains fully on IE8 64 bit, otherwise all got immunized

spybotsandra
2012-11-21, 14:42
Hello,

Do you run any other security software?
Did you close your browser during the immunization?

Best regards
Sandra
Team Spybot

cx166
2012-11-21, 18:17
Like I said on 1.6.2 and IE8 64 bit-thread other sec software (active) is Comodo Internet Security and yes I have disabled all CIS-progs and tried to immunize w/o results and yes browser has been closed during immunization and yes I have tried to immunization in 1.6.2 as safe mode admin (there I managed to temporarily get full immunization but rechecking left over 1000 secure domains un-immunizated).

spybotsandra
2012-11-22, 10:55
Hello,

Please open regedit with admin rights (Start>type 'regedit' in search bar>right-click and select 'Run as administrator')

open:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
or on a x86/32bit system:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
and delete the folder 'Domains'.

If this refuses to delete, right-click and select 'Permissions...', select your username from the list (or find it by clicking Add...>Advanced...>Find Now and then select your username and click OK). Then tick the Allow boxes, click OK and delete.

You can now open Spybot and Immunize again.

Best regards
Sandra
Team Spybot

cx166
2012-11-22, 14:16
Did that as I have done before too and deleted that folder and re-immunized but still 1055 un-immunzed sec. domains on IE8 64bit and even giving me and admins full perms to that folder (had only special perms before) and running immunize again didn't change anything.

sec. domains get immunized in IE8 32bit and IE8 32/64bit but not in IE8 64bit.


if SB2 makes a log about not immunized things I have no idea where it puts it since its not in c-drive's root like 1.6.2 put it there and no file named immudebug anywhere.

cx166
2012-11-22, 17:10
Something is very bugged since immunization is lost after I close immunization-window and then open it again from SB Start Center.

XP64bit is OS and only other security software is Comodo IS which I disabled and tried to immunize again but no effect.

cx166
2012-11-22, 17:14
update: after resetting IE8 sec. domains un-immunization dropped to ~600 but domains un-immunization rose to 262 from 0 and IE32/64bit sec. domains rose to 171 from 0.

cx166
2012-11-22, 21:32
post made 18:14 was before I realized that SB2 doesn't immunize at all (posted at 18:10).

spybotsandra
2012-11-23, 12:50
Hello,

Did you also deactivate SpywareBlaster to check if it's not a compatibility issue?

Please post or send us a registry export.

Open the registry editor by:
(a)
press windowskey + r then enter "regedit" (without quotation marks)
or
(b)
click on "start" , then "run" and enter "regedit" (without quotation marks)

(a+b)
and then browse to the paths:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
or on a x86/32bit system:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

Now export the key "run" by right clicking on it and choosing export. If you export, export only the selected structure. Give the file a name like domains.reg and attach it.
Thanks. :)

Best regards
Sandra
Team Spybot

cx166
2012-11-23, 16:09
Disabling Spywareblaster's protection and re-immunizing SB no effect (1055 un-immunized sec. doimains and immunizations vanish as soon as I close immunize-window).

zonemap attached.

spybotsandra
2012-11-26, 14:40
Hello,

Do you also have a screenshot of your immunization page?
Thanks.

Best regards
Sandra
Team Spybot

cx166
2012-11-27, 03:02
easy to talke.

attached below.

spybotsandra
2012-11-27, 11:20
Hello,

The screenshot does not show the problem.
It shows nothing immunized.

Best regards
Sandra
Team Spybot

cx166
2012-11-27, 17:05
Hello,

The screenshot does not show the problem.
It shows nothing immunized.

Best regards
Sandra
Team Spybot

cause it doesn't immunize anything permanently (not after I upgraded to SB 2.0) since after I close immunization window and reopen it all immunizes are gone like I have posted earlier.

attachment shows what it looks after immunize but before closing window.

I have no idea what causes problem since before OS reinstallation SB 1.6.2 immunized all but after OS reinstall IE8 64bit sec. domain immunize failed partially and SB 2.0 immunize is only temporal and only changes are that I installed sata-drivers and are usind CIS av atm instead Avast (which caused need for reinstallation) and SB etc were installed as default admin (created during OS install) not as user admin like now.

cx166
2012-12-02, 00:12
Any tips how do I get immunize to work? Soon I rollback to SB 1.6.2 since at least it immunizes all besides bit over 1000 Secure Domains.

Lancer
2012-12-02, 01:08
Hi again, cx166.

Are there any other users listed in Control Panel > User Accounts? Is Guest Account turned on? Can you immunize from that account?

cx166
2012-12-03, 03:15
Hi again, cx166.

Are there any other users listed in Control Panel > User Accounts? Is Guest Account turned on? Can you immunize from that account?

only visible accounts in user accounts are my account and disabled guest account, tested with guest account and same resullts mostly (no non-immunizes), all immunizes (guest-account's case there is only IE8 to be immunized besides global host) are still lost after I close immunize-window and re-open it.

Lancer
2012-12-03, 22:46
<snip>

yes I have disabled all CIS-progs and tried to immunize w/o results
Including Comodo Sandbox? Have you tried immunizing with Comodo D+ in training mode rather than disabled? Any VMware running? Have you edited Windows Group Policy?

cx166
2012-12-04, 00:36
I don't have sandboxing enabled. no VMware installed or other virtualization. haven't changed anything in group policy.

tried with d+ set as training mode and only change was that everything was immunized but after closing immunize-window and opening it again everything was un-immunized again.

cx166
2012-12-04, 03:54
no edit button so I need to make new post correcting wrong information: setting D+ to traing mode didn't change anything, IE8 64bit still has bit over 1k sec. domains un-immunized

Lancer
2012-12-06, 02:08
All I can think of is a corrupt Comodo installation. Try running Comodo Diagnostics. If no joy, temporarily uninstall Comodo and try immunizing again (turn on Windows Firewall 'til you re-install, and if you export your Comodo configuration you won't have to setup the rules/settings again).

cx166
2012-12-06, 19:48
CIS diagnostics doesn't report from any problems, uninstalling and reinstalling CIS is quite a big PIA so won't do it now.

Besides how come same version of CIS halt immunize now when it didn't before OS reinstall?

Lancer
2012-12-07, 02:31
Well, something has changed with your new Windows installation. By process of elimination, you will have to try to determine what that is. It may be a corrupt download, installation, or setting of CIS or Spybot. I suppose it could even be a bad Windows install or setting, though I think you would be having other system problems if that was the case.

cx166
2012-12-07, 15:51
CIS didn't block immunizes, it got tested.

Changes between old system and new system I have told already in this thread aka HDDs are now in SATA-mode (were in IDE-mode before), no Avast AV atm, ASUS EPU-6 Engine is installed (I installed it ~2 weeks after SB 1.6.2 and when I installed SB2 it was running) and bunch of Windows updates installed at same time instead once a month. Drivers should be same on both installations (integrated NIC might have newer driver but not sure).

cx166
2012-12-11, 01:14
downgraded to 1.6.2 and gost all immunized except few things at various places in IE8s immunizes and of course over 1k sec. domains.

I'll stay at SB 1.6.2 until some1 figures how to get SB2 immunize to work at 100%.