>>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem
>>> but...

Who told you that, Mike?

Did you only recently install Avira AntiVir and had you been running without
any anti-virus protection until then?

Your HijackThis log suggestes that you used to have a Norton application
installed which included Norton Ghost and Norton AntiVirus (e.g., Norton
System Works) and that you attempted to remove NAV, leaving Ghost in place.
Unfortunately, some NAV leftovers remain on your computer and these may be
the culprit here.

Since you have Nero BackItUp installed, do you still need Ghost?

How long has Spybot been installed and Tea Timer enabled? Do you understand
what Tea Timer does and how it does it?

When did you install IE7, before or after you installed the June 2009
updates?

IE Tools | Internet Options | Content | AutoComplete | Settings | Use
AutoComplete for: What options, if any, are checked/enabled here?

IE Tools | Internet Options | Privacy | Sites: Are the sites giving you
problems (e.g., Yahoo, eBay) listed in Managed Sites box with the "Always
Allow" annotation?

If you disable ZA and then enable the Windows Firewall, does the unwanted
behavior persist?
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002


Mike wrote:
> Bit more of an update.
>
> I found Windows live safety scanner installed despite my not having done
> so!
> Removed it thinking it was the reason for this but alas no.
> Also, installed Firefox but it has the exact same problem.
> The cookie will stand once but X out of IE twice and its gone.
> I just have no idea what is doing this?
>
> Suspect updates maybe?
>
> KB969897
>
> KB938127-v2 (no info found)
>
> KB968537
> KB969898
> KB970238
> KB961501
>
> Be nice to get some help on this I see I am not alone
>
> "Mike" wrote:
>> Update.
>>
>> User log on cookies will not stand.
>>
>> Have scanned system in safe mode and no infections found.
>>
>> Using msconfig stopped all services and start ups other than MS ones.
>>
>> Problem continued.
>>
>> The browser (IE7) will store the cookie initially, it can be seen in the
>> 'files' tab and if double clicked
>> you can read the information in the cookie.
>>
>> If you shut down IE and go back in the cookie seems ok and you are still
>> logged in.
>>
>> However, do it a second time and the cookie does not work.
>> If you check the 'file' tab the cookie still shows but when you double
>> click on it
>> you get file/path not found error
>>
>> IE is set to medium.
>>
>> "Mike" wrote:
>>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem
>>> but
>>> it has not.
>>> Towards the end of last week after a load of MS updates I suddenly found
>>> that I had to enter my log in details for all my sites like Yahoo, ebay
>>> and many forums.
>>> Everytime I shut down IE I seemed to lose my log in cookies.
>>>
>>> Using IE7 I have checked to always allow session cookies, set the
>>> security
>>> to medium.
>>> Cleared out all the caches, re built the cookies.
>>> Made sure CC cleaner does not remove them.
>>>
>>> But nothing works, cookies won't stand.
>>> They seem to be stored but when you click on them you get the error that
>>> they are not found!
>>>
>>> This is a real big pain.
>>>
>>> Here is a Hijack log in case anything there may help.
>>> Please help this is driving me mad LOL
>>>
>>> Logfile of Trend Micro HijackThis v2.0.2
>>> Scan saved at 23:45:43, on 13/06/2009
>>> Platform: Windows XP SP3 (WinNT 5.01.2600)
>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850)
>>> Boot mode: Normal
>>>
>>> Running processes:
<SNIP>
>>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
<SNIP>
>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe
<SNIP>
>>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
>>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe
<SNIP>
>>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe
>>> E:\WINDOWS\Explorer.EXE
>>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
<SNIP>
>>> E:\WINDOWS\system32\RUNDLL32.EXE
>>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe
<SNIP>
>>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe
<SNIP>
>>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

<SNIP>
>>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter -
>>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
<SNIP>
>>> O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} -
>>> E:\Program Files\Google\Google Gears\Internet
>>> Explorer\0.5.21.0\gears.dll
<SNIP>
>>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone
>>> Labs\ZoneAlarm\zlclient.exe
<SNIP>
>>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton
>>> Ghost\Agent\GhostTray.exe
<SNIP>
>>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec
>>> Shared\ccApp.exe
<SNIP>
>>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir
>>> Desktop\avgnt.exe" /min
<SNIP>
>>> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search &
>>> Destroy\TeaTimer.exe
<SNIP>
>>> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira
>>> GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe
>>> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH -
>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe
<SNIP>
>>> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec
>>> Corporation -
>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
>>> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec
>>> Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
>>> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec
>>> Corporation - E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
<SNIP>
>>> O23 - Service: Norton Ghost - Symantec Corporation - E:\Program
>>> Files\Norton Ghost\Agent\VProSvc.exe
<SNIP>
>>> O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program
>>> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
>>> O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC -
>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe