Update.
User log on cookies will not stand.
Have scanned system in safe mode and no infections found.
Using msconfig stopped all services and start ups other than MS ones.
Problem continued.
The browser (IE7) will store the cookie initially, it can be seen in the
'files' tab and if double clicked
you can read the information in the cookie.
If you shut down IE and go back in the cookie seems ok and you are still
logged in.
However, do it a second time and the cookie does not work.
If you check the 'file' tab the cookie still shows but when you double click
on it
you get file/path not found error
IE is set to medium.
"Mike" wrote:
> HI, I was using IE 6 but was told to go to IE 7 to solve this problem but it
> has not.
> Towards the end of last week after a load of MS updates I suddenly found
> that I had to enter my log in details for all my sites like Yahoo, ebay and
> many forums.
> Everytime I shut down IE I seemed to lose my log in cookies.
>
> Using IE7 I have checked to always allow session cookies, set the security
> to medium.
> Cleared out all the caches, re built the cookies.
> Made sure CC cleaner does not remove them.
>
> But nothing works, cookies won't stand.
> They seem to be stored but when you click on them you get the error that
> they are not found!
>
> This is a real big pain.
>
> Here is a Hijack log in case anything there may help.
> Please help this is driving me mad LOL
>
> Logfile of Trend Micro HijackThis v2.0.2
> Scan saved at 23:45:43, on 13/06/2009
> Platform: Windows XP SP3 (WinNT 5.01.2600)
> MSIE: Internet Explorer v7.00 (7.00.6000.16850)
> Boot mode: Normal
>
> Running processes:
> E:\WINDOWS\System32\smss.exe
> E:\WINDOWS\system32\winlogon.exe
> E:\WINDOWS\system32\services.exe
> E:\WINDOWS\system32\lsass.exe
> E:\WINDOWS\system32\svchost.exe
> E:\WINDOWS\System32\svchost.exe
> E:\WINDOWS\system32\svchost.exe
> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
> E:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
> E:\WINDOWS\system32\spoolsv.exe
> E:\Program Files\Avira\AntiVir Desktop\sched.exe
> E:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
> E:\Program Files\Avira\AntiVir Desktop\avguard.exe
> E:\WINDOWS\System32\GEARSec.exe
> E:\Program Files\iolo\common\lib\ioloServiceManager.exe
> E:\Program Files\Google\Update\GoogleUpdate.exe
> E:\Program Files\Java\jre6\bin\jqs.exe
> E:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
> E:\Program Files\Norton Ghost\Agent\VProSvc.exe
> E:\WINDOWS\system32\nvsvc32.exe
> E:\WINDOWS\system32\PGPsdkServ.exe
> E:\WINDOWS\system32\IoctlSvc.exe
> E:\Program Files\CyberLink\Shared Files\RichVideo.exe
> E:\WINDOWS\system32\tcpsvcs.exe
> E:\WINDOWS\System32\snmp.exe
> E:\WINDOWS\system32\svchost.exe
> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
> E:\WINDOWS\system32\ZoneLabs\vsmon.exe
> E:\WINDOWS\Explorer.EXE
> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
> E:\WINDOWS\System32\svchost.exe
> E:\WINDOWS\SOUNDMAN.EXE
> E:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe
> E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2 a.exe
> E:\WINDOWS\system32\RUNDLL32.EXE
> E:\Program Files\Norton Ghost\Agent\GhostTray.exe
> E:\Program Files\Microsoft IntelliType Pro\itype.exe
> E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H 2.EXE
> E:\Program Files\Common Files\Symantec Shared\ccApp.exe
> E:\WINDOWS\system32\rundll32.exe
> E:\Program Files\Avira\AntiVir Desktop\avgnt.exe
> E:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
> E:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
> E:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
> E:\Program Files\SpywareGuard\sgmain.exe
> E:\Program Files\SpywareGuard\sgbhp.exe
> E:\Program Files\PC Connectivity Solution\ServiceLayer.exe
> E:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
> E:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
> E:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
> E:\Program Files\Internet Explorer\iexplore.exe
> E:\Program Files\Trend Micro\HijackThis\HijackThis.exe
>
> R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
> http://go.microsoft.com/fwlink/?LinkId=69157
> R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88}
> - (no file)
> O2 - BHO: Adobe PDF Reader Link Helper -
> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat
> 7.0\ActiveX\AcroIEHelper.dll
> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter -
> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
> O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper -
> {4A368E80-174F-4872-96B5-0B27DDD11DB2} - E:\Program
> Files\SpywareGuard\dlprotect.dll
> O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F}
> - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
> O2 - BHO: Java(tm) Plug-In SSV Helper -
> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program
> Files\Java\jre6\bin\ssv.dll
> O2 - BHO: Encarta Web Companion Helper Object -
> {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - E:\Program Files\Common
> Files\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL
> O2 - BHO: Java(tm) Plug-In 2 SSV Helper -
> {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program
> Files\Java\jre6\bin\jp2ssv.dll
> O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} -
> E:\Program Files\Google\Google Gears\Internet Explorer\0.5.21.0\gears.dll
> O2 - BHO: FlashFXP Helper for Internet Explorer -
> {E5A1691B-D188-4419-AD02-90002030B8EE} - E:\PROGRA~1\FlashFXP\IEFlash.dll
> O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} -
> E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
> O3 - Toolbar: Encarta Web Companion - {147D6308-0614-4112-89B1-31402F9B82C4}
> - E:\Program Files\Common Files\Microsoft Shared\Encarta Web
> Companion\ENCWCBAR.DLL
> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone
> Labs\ZoneAlarm\zlclient.exe
> O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
> O4 - HKLM\..\Run: [SmartDefrag] "E:\Program Files\IObit\IObit
> SmartDefrag\IObit SmartDefrag.exe" /StartUp
> O4 - HKLM\..\Run: [pdfFactory Pro Dispatcher v2]
> "E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis 2a.exe" /source=HKLM
> O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
> O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE
> E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
> O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
> E:\WINDOWS\system32\NvCpl.dll,NvStartup
> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton
> Ghost\Agent\GhostTray.exe
> O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
> O4 - HKLM\..\Run: [itype] "E:\Program Files\Microsoft IntelliType
> Pro\itype.exe"
> O4 - HKLM\..\Run: [EPSON Stylus Photo R200 Series]
> E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H 2.EXE /P30 "EPSON Stylus
> Photo R200 Series" /O6 "USB001" /M "Stylus Photo R200"
> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec
> Shared\ccApp.exe
> O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe
> bthprops.cpl,,BluetoothAuthenticationAgent
> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir Desktop\avgnt.exe"
> /min
> O4 - HKLM\..\Run: [ArcSoft Connection Service] E:\Program Files\Common
> Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search &
> Destroy\TeaTimer.exe
> O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User
> 'LOCAL SERVICE')
> O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User
> 'NETWORK SERVICE')
> O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User
> 'SYSTEM')
> O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User
> 'Default user')
> O4 - Startup: SpywareGuard.lnk = ?
> O4 - Global Startup: Device Detector 3.lnk = ?
> O8 - Extra context menu item: &ieSpell Options - res://E:\Program
> Files\ieSpell\iespell.dll/SPELLOPTION.HTM
> O8 - Extra context menu item: &Lookup Meaning - res://E:\Program
> Files\ieSpell\iespell.dll/LOOKUPMEANING.HTM
> O8 - Extra context menu item: Check &Spelling - res://E:\Program
> Files\ieSpell\iespell.dll/SPELLCHECK.HTM
> O8 - Extra context menu item: E&xport to Microsoft Excel -
> res://E:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
> O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} -
> E:\Program Files\Google\Google Gears\Internet Explorer\0.5.21.0\gears.dll
> O9 - Extra 'Tools' menuitem: &Gears Settings -
> {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - E:\Program Files\Google\Google
> Gears\Internet Explorer\0.5.21.0\gears.dll
> O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} -
> E:\Program Files\ieSpell\iespell.dll
> O9 - Extra 'Tools' menuitem: ieSpell -
> {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - E:\Program Files\ieSpell\iespell.dll
> O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} -
> E:\Program Files\ieSpell\iespell.dll
> O9 - Extra 'Tools' menuitem: ieSpell Options -
> {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - E:\Program Files\ieSpell\iespell.dll
> O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} -
> E:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
> O9 - Extra 'Tools' menuitem: Launch WinHTTrack -
> {36ECAF82-3300-8F84-092E-AFF36D6C7040} - E:\Program
> Files\WinHTTrack\WinHTTrackIEBar.dll
> O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
> E:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
> O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -
> E:\PROGRA~1\SPYBOT~1\SDHelper.dll
> O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration -
> {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
> O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} -
> E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
> O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
> {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network
> Diagnostic\xpnetdiag.exe
> O10 - Unknown file in Winsock LSP: e:\windows\system32\mswsock32.dll
> O14 - IERESET.INF: START_PAGE_URL=http://www.orange.co.uk
> O16 - DPF: Garmin Communicator Plug-In -
> https://my.garmin.com/static/m/cab/2...nAxControl.CAB
> O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5
> Control) -
> http://upload.facebook.com/controls/...oUploader5.cab
> O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab)
> -
> http://www.nvidia.com/content/Driver...sysreqlab3.cab
> O16 - DPF: {26522409-8BBF-4C5B-A4D3-CF4B1D6F255B} -
> http://www.umediaserver.net/bin/UMediaControl5.cab
> O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) -
> O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} -
> O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} -
> O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
> O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
> O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} -
> http://www.nvidia.com/content/Driver...aSmartScan.cab
> O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} -
> http://www.crucial.com/controls/cpcScanner.cab
> O16 - DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} (Java Plug-in 1.5.0_04) -
> O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} (Java Plug-in 1.5.0_06) -
> O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} -
> O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
> O17 -
> HKLM\System\CCS\Services\Tcpip\..\{A8F5FCA6-48BB-4538-8EE1-4BF55A385B87}:
> NameServer = 192.168.90.1
> O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -
> E:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
> O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - E:\Program
> Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira
> GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe
> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH -
> E:\Program Files\Avira\AntiVir Desktop\avguard.exe
> O23 - Service: Basics Service - Unknown owner - E:\Program
> Files\Seagate\Basics\Service\SyncServicesBasics.ex e (file missing)
> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation -
> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec
> Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation -
> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
> O23 - Service: GEARSecurity - GEAR Software - E:\WINDOWS\System32\GEARSec.exe
> O23 - Service: Google Update Service (gupdate1c92e10b050f0be)
> (gupdate1c92e10b050f0be) - Google Inc. - E:\Program
> Files\Google\Update\GoogleUpdate.exe
> O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
> Corporation - E:\Program Files\Common Files\InstallShield\Driver\11\Intel
> 32\IDriverT.exe
> O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner
> - E:\Program Files\iolo\common\lib\ioloServiceManager.exe
> O23 - Service: iolo System Service (ioloSystemService) - Unknown owner -
> E:\Program Files\iolo\common\lib\ioloServiceManager.exe
> O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun
> Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe
> O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - E:\Program
> Files\Lavasoft\Ad-Aware\AAWService.exe
> O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - E:\Program
> Files\Nero\Nero8\Nero BackItUp\NBService.exe
> O23 - Service: Norton Ghost - Symantec Corporation - E:\Program Files\Norton
> Ghost\Agent\VProSvc.exe
> O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation -
> E:\WINDOWS\system32\nvsvc32.exe
> O23 - Service: PGPsdkService (PGPsdkServ) - PGP Corporation -
> E:\WINDOWS\system32\PGPsdkServ.exe
> O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. -
> E:\WINDOWS\system32\IoctlSvc.exe
> O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner
> - E:\Program Files\CyberLink\Shared Files\RichVideo.exe
> O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) -
> CACE Technologies - E:\Program Files\WinPcap\rpcapd.exe
> O23 - Service: ServiceLayer - Nokia. - E:\Program Files\PC Connectivity
> Solution\ServiceLayer.exe
> O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program
> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
> O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC -
> E:\WINDOWS\system32\ZoneLabs\vsmon.exe
>
> --
> End of file - 13356 bytes
>
>
>