Hi

Was on PC Q&A said IE6 was the problem.
Its OK I quite like IE7

OK re Norton, no Ghost is my main back up and this is why you see the Norton
stuff.
I don't use the Nero thing at all.

Been running Avira for some time now, AVG prior to that.

The problem occured when I was usinging IE6.
I installed IE7 after the June updates.

I have used spybot and its tea timer for many years now.

Auto Complete, forms is the only unchecked box.

Yes I have put some of the sites into always allow.

I'll try the Zone alarm test and report back shortly.

Thanks




"PA Bear [MS MVP]" wrote:

> >>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem
> >>> but...
>
> Who told you that, Mike?
>
> Did you only recently install Avira AntiVir and had you been running without
> any anti-virus protection until then?
>
> Your HijackThis log suggestes that you used to have a Norton application
> installed which included Norton Ghost and Norton AntiVirus (e.g., Norton
> System Works) and that you attempted to remove NAV, leaving Ghost in place.
> Unfortunately, some NAV leftovers remain on your computer and these may be
> the culprit here.
>
> Since you have Nero BackItUp installed, do you still need Ghost?
>
> How long has Spybot been installed and Tea Timer enabled? Do you understand
> what Tea Timer does and how it does it?
>
> When did you install IE7, before or after you installed the June 2009
> updates?
>
> IE Tools | Internet Options | Content | AutoComplete | Settings | Use
> AutoComplete for: What options, if any, are checked/enabled here?
>
> IE Tools | Internet Options | Privacy | Sites: Are the sites giving you
> problems (e.g., Yahoo, eBay) listed in Managed Sites box with the "Always
> Allow" annotation?
>
> If you disable ZA and then enable the Windows Firewall, does the unwanted
> behavior persist?
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002
>
>
> Mike wrote:
> > Bit more of an update.
> >
> > I found Windows live safety scanner installed despite my not having done
> > so!
> > Removed it thinking it was the reason for this but alas no.
> > Also, installed Firefox but it has the exact same problem.
> > The cookie will stand once but X out of IE twice and its gone.
> > I just have no idea what is doing this?
> >
> > Suspect updates maybe?
> >
> > KB969897
> >
> > KB938127-v2 (no info found)
> >
> > KB968537
> > KB969898
> > KB970238
> > KB961501
> >
> > Be nice to get some help on this I see I am not alone
> >
> > "Mike" wrote:
> >> Update.
> >>
> >> User log on cookies will not stand.
> >>
> >> Have scanned system in safe mode and no infections found.
> >>
> >> Using msconfig stopped all services and start ups other than MS ones.
> >>
> >> Problem continued.
> >>
> >> The browser (IE7) will store the cookie initially, it can be seen in the
> >> 'files' tab and if double clicked
> >> you can read the information in the cookie.
> >>
> >> If you shut down IE and go back in the cookie seems ok and you are still
> >> logged in.
> >>
> >> However, do it a second time and the cookie does not work.
> >> If you check the 'file' tab the cookie still shows but when you double
> >> click on it
> >> you get file/path not found error
> >>
> >> IE is set to medium.
> >>
> >> "Mike" wrote:
> >>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem
> >>> but
> >>> it has not.
> >>> Towards the end of last week after a load of MS updates I suddenly found
> >>> that I had to enter my log in details for all my sites like Yahoo, ebay
> >>> and many forums.
> >>> Everytime I shut down IE I seemed to lose my log in cookies.
> >>>
> >>> Using IE7 I have checked to always allow session cookies, set the
> >>> security
> >>> to medium.
> >>> Cleared out all the caches, re built the cookies.
> >>> Made sure CC cleaner does not remove them.
> >>>
> >>> But nothing works, cookies won't stand.
> >>> They seem to be stored but when you click on them you get the error that
> >>> they are not found!
> >>>
> >>> This is a real big pain.
> >>>
> >>> Here is a Hijack log in case anything there may help.
> >>> Please help this is driving me mad LOL
> >>>
> >>> Logfile of Trend Micro HijackThis v2.0.2
> >>> Scan saved at 23:45:43, on 13/06/2009
> >>> Platform: Windows XP SP3 (WinNT 5.01.2600)
> >>> MSIE: Internet Explorer v7.00 (7.00.6000.16850)
> >>> Boot mode: Normal
> >>>
> >>> Running processes:
> <SNIP>
> >>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
> >>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
> <SNIP>
> >>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe
> <SNIP>
> >>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
> >>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe
> <SNIP>
> >>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
> >>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe
> >>> E:\WINDOWS\Explorer.EXE
> >>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
> <SNIP>
> >>> E:\WINDOWS\system32\RUNDLL32.EXE
> >>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe
> <SNIP>
> >>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe
> <SNIP>
> >>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
>
> <SNIP>
> >>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter -
> >>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
> <SNIP>
> >>> O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} -
> >>> E:\Program Files\Google\Google Gears\Internet
> >>> Explorer\0.5.21.0\gears.dll
> <SNIP>
> >>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone
> >>> Labs\ZoneAlarm\zlclient.exe
> <SNIP>
> >>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton
> >>> Ghost\Agent\GhostTray.exe
> <SNIP>
> >>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec
> >>> Shared\ccApp.exe
> <SNIP>
> >>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir
> >>> Desktop\avgnt.exe" /min
> <SNIP>
> >>> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search &
> >>> Destroy\TeaTimer.exe
> <SNIP>
> >>> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira
> >>> GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe
> >>> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH -
> >>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe
> <SNIP>
> >>> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec
> >>> Corporation -
> >>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
> >>> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec
> >>> Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
> >>> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec
> >>> Corporation - E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
> <SNIP>
> >>> O23 - Service: Norton Ghost - Symantec Corporation - E:\Program
> >>> Files\Norton Ghost\Agent\VProSvc.exe
> <SNIP>
> >>> O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program
> >>> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
> >>> O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC -
> >>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe
>
>