Secure sign-on crashed with XP Pro SP2 and IE SP2

[jpm3]

We recently set up a new XP Pro SP2 system, and we lost the ability to sign on to 2 out of 4 of our on-line banking sites. The banks say to Disable Browser Extensions, and this works, but isn't there a more specific remedy? The accountant wants her toolbars!

KB article 870700 says to go through the extensions and enable one at a time, but 3 bad sign-ons at a bank and you're locked out. Has anyone been through this with success?

Here is the Add-ons list -- many thanks for a reply:
AcroIRHlprObj Class (adobe)
Adobe Acrobatr Control
CNavExtBho Class (symantec)
DriveLetterAccess (sonic solutions)
Java Plug-in 1.4.2_03 (javasoft)
Norton antivirus
SearchAssistantOC (microsoft)
Shockwave Flash Object (macromedia)
Sun Java Console (sun micro)
Windows Media Player
Windows Messenger
Yahoo! Companion BHO
Yahoo! Toolbar
YInstStarterClass (yahoo)

 

[jimp56]

even though the system is new, have you scanned for adware/malware? I would also temporarily force a disable of the toolbars to rule them out.

 

[bcastner]

See, in particular, the testing method for add-ins:

http://support.microsoft.com/default.aspx?kbid=870700

Unfortunately, the Yahoo add-ins are likely at fault in this instance. Talk to Yahoo.

 

[jpm3]

Uninstalling Yahoo fixes the sign-on at AmSouth, but not SunTrust. So it's also one of the others in the add-ons list, and I have a call into Yahoo. Which party is going against generally accepted principals here, the add-ons or the banks?

 

[bcastner]

Unfortunately, banks are always right.

CNavExtBho Class (symantec)
DriveLetterAccess (sonic solutions)
Java Plug-in 1.4.2_03 (javasoft)
Norton antivirus
SearchAssistantOC (microsoft)
Shockwave Flash Object (macromedia)

One of these is likely bother the SunTrust sight. I would talk to the IT guys there. If you are very, very nice about it, you likely can work out the issue so that both AmSouth, SunTrust, and your Yahoo stuff work.

As there are so many browser alternatives available, you might consider training the user to use IE for the bank secure sites, and something like Firefox (which does not use the add-in listing used by IE) for everything else.