IE 7 Protected Mode stays Off

[Victek]

I'm having a problem where I can't turn On protected mode in IE 7. UAC is
On, and protected mode is checked in the internet options security zones
settings. Any suggestions as to what I should look at?

[PA Bear [MS MVP]]

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting the requested logs
in an appropriate forum.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or other appropriate forums.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

[Victek]

> Unexplained computer behavior may be caused by deceptive software
> http://support.microsoft.com/kb/827315
>
> Run a /thorough/ check for hijackware, including posting the requested
> logs in an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.net/viewtopic.php?f=30&t=4075
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> **Seek expert assistance in
> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://aumha.net/viewforum.php?f=30, or other appropriate forums.**
>
> If the procedures look too complex - and there is no shame in admitting
> this isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>

Thanks for the reply. I've been able to resolve the Protected Mode (PM)
issue - now IE 7 is starting in PM - but I'm having a problem where it
crashes upon closing with a DEP error. This didn't happen in the past.
When I start IE 7 "without add-ons" it closes normally, which suggests a
problem with an add-on. I've done a full malware scan with a couple of good
anti-malware apps and no infections are found. I've viewed all the BHO's
and there's nothing suspicious - everything there is something I've
intentionally installed and has worked in the past without problems. Any
suggestions as to how to troubleshoot the add-ons?

[Victek]

> Thanks for the reply. I've been able to resolve the Protected Mode (PM)
> issue - now IE 7 is starting in PM - but I'm having a problem where it
> crashes upon closing with a DEP error. This didn't happen in the past.
> When I start IE 7 "without add-ons" it closes normally, which suggests a
> problem with an add-on. I've done a full malware scan with a couple of
> good anti-malware apps and no infections are found. I've viewed all the
> BHO's and there's nothing suspicious - everything there is something I've
> intentionally installed and has worked in the past without problems. Any
> suggestions as to how to troubleshoot the add-ons?

I was able to resolve the problem by un-checking:

"Enable memory protection to mitigate online attacks"

Internet Options/Advance/

[PA Bear [MS MVP]]

Victek wrote:
<paste>

>> I'm having a problem where I can't turn On protected mode in IE 7. UAC
>> is
>> On, and protected mode is checked in the internet options security zones
>> settings. Any suggestions as to what I should look at?

</paste>

> PA Bear wrote:
>> Unexplained computer behavior may be caused by deceptive software
>> http://support.microsoft.com/kb/827315
>>
>> Run a /thorough/ check for hijackware, including posting the requested
>> logs in an appropriate forum.
>>
>> Checking for/Help with Hijackware
>> http://aumha.net/viewtopic.php?f=30&t=4075
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>>
>> **Seek expert assistance in
>> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
>> http://forums.spybot.info/forumdisplay.php?f=22,
>> http://aumha.net/viewforum.php?f=30, or other appropriate forums.**
>>
>> If the procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair
>> shop.
>>

> Thanks for the reply. I've been able to resolve the Protected Mode (PM)
> issue - now IE 7 is starting in PM - but I'm having a problem where it
> crashes upon closing with a DEP error. This didn't happen in the past.
> When I start IE 7 "without add-ons" it closes normally, which suggests a
> problem with an add-on. I've done a full malware scan with a couple of
> good
> anti-malware apps and no infections are found. I've viewed all the BHO's
> and there's nothing suspicious - everything there is something I've
> intentionally installed and has worked in the past without problems. Any
> suggestions as to how to troubleshoot the add-ons?

[To keep track of things, it helps immensely if you include all of previous
message(s) in your replies to the newsgroup. Thank you.]

How did you resolve the issue of IE not starting in PM with UAC enabled?

If you do a Reset, does the behavior persist when you open IE normally? See
http://support.microsoft.com/kb/923737

I think scanning with anti-malware apps (e.g., MBAM, STOOPIDAntiSpyware)
might not be enough and that you'll need expert assistance in an appropriate
forum.
--
~PA Bear

[PA Bear [MS MVP]]

Ideally, you want DEP enabled. See this archived & related discussion:
http://groups.google.com/group/microsoft.public.windows.vista.general/browse_frm/thread/54c30fa2f5e940d

Chances are that one or more of your Add-ons (which can include
hijackware-related Add-ons) is causing your problems.

[Victek]

The reason protected mode was not working originally was I discovered UAC
was Off. After I turned it On it didn't immediately work, but did so after
another reboot. So far I've done full scans with SuperAntiSpyware and
Norton Internet Security 2009. I'll try MBAM next and maybe something else
that specializes in rootkit detection to see if anything shows up.

[PA Bear [MS MVP]]

> The reason protected mode was not working originally was I discovered UAC
> was Off. After I turned it On it didn't immediately work, but did so
> after
> another reboot. So far I've done full scans with SuperAntiSpyware and
> Norton Internet Security 2009. I'll try MBAM next and maybe something
> else
> that specializes in rootkit detection to see if anything shows up.

Thanks for clarifying, Victek. PMIE and UAC work hand-in-glove, as you've
discovered.