> Was on PC Q&A said IE6 was the problem.

I doubt it.

> OK re Norton, no Ghost is my main back up and this is why you see the
> Norton
> stuff.

Nevertheless, there are some leftovers from Norton System Works and they may
have something to do with your problems. Unfortunately, the only way to get
rid of them would also remove Ghost.

> I don't use the Nero thing at all.

Then why is it still installed & loading at boot?

> Been running Avira for some time now, AVG prior to that.

The Norton leftovers may have compromised the installs of both Avira and
AVG.

> The problem occured when I was usinging IE6.
> I installed IE7 after the June updates.

Then neither IE7 nor the June updates are causing your problems.

> I have used spybot and its tea timer for many years now.

Again, do you understand what Tea Timer does and how it does it?

Did you disable (1) Tea Timer & SDHelper, (2) your anti-virus application,
and (3) ZoneAlarm *and then* (4) enable the Windows Firewall before you
installed WinXP SP3?

> Yes I have put some of the sites into always allow.

Does that include yahoo.com, ebay.com, and all of your forums (e.g.,
pcqanda.com)?


Mike wrote:
> Was on PC Q&A said IE6 was the problem.
> Its OK I quite like IE7
>
> OK re Norton, no Ghost is my main back up and this is why you see the
> Norton
> stuff.
> I don't use the Nero thing at all.
>
> Been running Avira for some time now, AVG prior to that.
>
> The problem occured when I was usinging IE6.
> I installed IE7 after the June updates.
>
> I have used spybot and its tea timer for many years now.
>
> Auto Complete, forms is the only unchecked box.
>
> Yes I have put some of the sites into always allow.
>
> I'll try the Zone alarm test and report back shortly.
>
> "PA Bear [MS MVP]" wrote:
>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem
>>>>> but...
>>
>> Who told you that, Mike?
>>
>> Did you only recently install Avira AntiVir and had you been running
>> without any anti-virus protection until then?
>>
>> Your HijackThis log suggestes that you used to have a Norton application
>> installed which included Norton Ghost and Norton AntiVirus (e.g., Norton
>> System Works) and that you attempted to remove NAV, leaving Ghost in
>> place.
>> Unfortunately, some NAV leftovers remain on your computer and these may
>> be
>> the culprit here.
>>
>> Since you have Nero BackItUp installed, do you still need Ghost?
>>
>> How long has Spybot been installed and Tea Timer enabled? Do you
>> understand what Tea Timer does and how it does it?
>>
>> When did you install IE7, before or after you installed the June 2009
>> updates?
>>
>> IE Tools | Internet Options | Content | AutoComplete | Settings | Use
>> AutoComplete for: What options, if any, are checked/enabled here?
>>
>> IE Tools | Internet Options | Privacy | Sites: Are the sites giving you
>> problems (e.g., Yahoo, eBay) listed in Managed Sites box with the "Always
>> Allow" annotation?
>>
>> If you disable ZA and then enable the Windows Firewall, does the unwanted
>> behavior persist?
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Client - since 2002
>>
>>
>> Mike wrote:
>>> Bit more of an update.
>>>
>>> I found Windows live safety scanner installed despite my not having done
>>> so!
>>> Removed it thinking it was the reason for this but alas no.
>>> Also, installed Firefox but it has the exact same problem.
>>> The cookie will stand once but X out of IE twice and its gone.
>>> I just have no idea what is doing this?
>>>
>>> Suspect updates maybe?
>>>
>>> KB969897
>>>
>>> KB938127-v2 (no info found)
>>>
>>> KB968537
>>> KB969898
>>> KB970238
>>> KB961501
>>>
>>> Be nice to get some help on this I see I am not alone
>>>
>>> "Mike" wrote:
>>>> Update.
>>>>
>>>> User log on cookies will not stand.
>>>>
>>>> Have scanned system in safe mode and no infections found.
>>>>
>>>> Using msconfig stopped all services and start ups other than MS ones.
>>>>
>>>> Problem continued.
>>>>
>>>> The browser (IE7) will store the cookie initially, it can be seen in
>>>> the
>>>> 'files' tab and if double clicked
>>>> you can read the information in the cookie.
>>>>
>>>> If you shut down IE and go back in the cookie seems ok and you are
>>>> still
>>>> logged in.
>>>>
>>>> However, do it a second time and the cookie does not work.
>>>> If you check the 'file' tab the cookie still shows but when you double
>>>> click on it
>>>> you get file/path not found error
>>>>
>>>> IE is set to medium.
>>>>
>>>> "Mike" wrote:
>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem
>>>>> but
>>>>> it has not.
>>>>> Towards the end of last week after a load of MS updates I suddenly
>>>>> found
>>>>> that I had to enter my log in details for all my sites like Yahoo,
>>>>> ebay
>>>>> and many forums.
>>>>> Everytime I shut down IE I seemed to lose my log in cookies.
>>>>>
>>>>> Using IE7 I have checked to always allow session cookies, set the
>>>>> security
>>>>> to medium.
>>>>> Cleared out all the caches, re built the cookies.
>>>>> Made sure CC cleaner does not remove them.
>>>>>
>>>>> But nothing works, cookies won't stand.
>>>>> They seem to be stored but when you click on them you get the error
>>>>> that
>>>>> they are not found!
>>>>>
>>>>> This is a real big pain.
>>>>>
>>>>> Here is a Hijack log in case anything there may help.
>>>>> Please help this is driving me mad LOL
>>>>>
>>>>> Logfile of Trend Micro HijackThis v2.0.2
>>>>> Scan saved at 23:45:43, on 13/06/2009
>>>>> Platform: Windows XP SP3 (WinNT 5.01.2600)
>>>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850)
>>>>> Boot mode: Normal
>>>>>
>>>>> Running processes:
>> <SNIP>
>>>>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
>> <SNIP>
>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe
>> <SNIP>
>>>>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
>>>>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe
>> <SNIP>
>>>>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
>>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe
>>>>> E:\WINDOWS\Explorer.EXE
>>>>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
>> <SNIP>
>>>>> E:\WINDOWS\system32\RUNDLL32.EXE
>>>>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe
>> <SNIP>
>>>>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe
>> <SNIP>
>>>>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
>>
>> <SNIP>
>>>>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter -
>>>>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
>> <SNIP>
>>>>> O2 - BHO: Google Gears Helper -
>>>>> {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} -
>>>>> E:\Program Files\Google\Google Gears\Internet
>>>>> Explorer\0.5.21.0\gears.dll
>> <SNIP>
>>>>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone
>>>>> Labs\ZoneAlarm\zlclient.exe
>> <SNIP>
>>>>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton
>>>>> Ghost\Agent\GhostTray.exe
>> <SNIP>
>>>>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec
>>>>> Shared\ccApp.exe
>> <SNIP>
>>>>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir
>>>>> Desktop\avgnt.exe" /min
>> <SNIP>
>>>>> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search
>>>>> &
>>>>> Destroy\TeaTimer.exe
>> <SNIP>
>>>>> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) -
>>>>> Avira
>>>>> GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe
>>>>> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH -
>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe
>> <SNIP>
>>>>> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec
>>>>> Corporation -
>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
>>>>> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec
>>>>> Corporation - E:\Program Files\Common Files\Symantec
>>>>> Shared\ccPwdSvc.exe
>>>>> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec
>>>>> Corporation - E:\Program Files\Common Files\Symantec
>>>>> Shared\ccSetMgr.exe <SNIP> O23 - Service: Norton Ghost - Symantec
>>>>> Corporation - E:\Program Files\Norton Ghost\Agent\VProSvc.exe
>> <SNIP>
>>>>> O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program
>>>>> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
>>>>> O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC -
>>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe