HI

OK stopping ZA made no differance sadly :-(

Mike

"PA Bear [MS MVP]" wrote:

> > Having real trouble posting here as well now
>
> You may prefer to access this newsgroup in your default newsreader (e.g.,
> Outlook Express). Click this link:
> news://msnews.microsoft.com/microsof...plorer.general
>
> You were going to test this behavior after disabling ZA and then enabling
> the Windows Firewall. What effect, if any, did that have?
>
> If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites in
> question & log-in, then (4) close the IE window without logging-out, (5)
> reboot, and (6) revisit the sites, does the behavior persist?
>
> HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409
>
> NB: If you don't fully understand what Tea Timer does and how it does it,
> leave it permanently disabled.
>
> > My system has worked for years without issue the only common change I can
> > think of is the June updates.
>
> Sorry, I was under the impression that you were experiencing the unwanted
> behavior prior to installing the June Update and IE7. Try the above for now
> then we'll consider other options, Mike.
> --
> ~PA Bear
>
> Mike wrote:
> > Having real trouble posting here as well now :-(
> >
> > Yes to all your questons.
> > I have taken all steps I can think of to isolate the cause including
> > stoping
> > all services and start ups other than MS ones.
> >
> > My system has worked for years without issue the only common changeI can
> > think of is the June updates.
> >
> > I'll give it a few hours and see if my other full reply shows up!
> >
> > "PA Bear [MS MVP]" wrote:
> >>> Was on PC Q&A said IE6 was the problem.
> >>
> >> I doubt it.
> >>
> >>> OK re Norton, no Ghost is my main back up and this is why you see the
> >>> Norton stuff.
> >>
> >> Nevertheless, there are some leftovers from Norton System Works and they
> >> may have something to do with your problems. Unfortunately, the only way
> >> to get rid of them would also remove Ghost.
> >>
> >>> I don't use the Nero thing at all.
> >>
> >> Then why is it still installed & loading at boot?
> >>
> >>> Been running Avira for some time now, AVG prior to that.
> >>
> >> The Norton leftovers may have compromised the installs of both Avira and
> >> AVG.
> >>
> >>> The problem occured when I was usinging IE6.
> >>> I installed IE7 after the June updates.
> >>
> >> Then neither IE7 nor the June updates are causing your problems.
> >>
> >>> I have used spybot and its tea timer for many years now.
> >>
> >> Again, do you understand what Tea Timer does and how it does it?
> >>
> >> Did you disable (1) Tea Timer & SDHelper, (2) your anti-virus
> >> application,
> >> and (3) ZoneAlarm *and then* (4) enable the Windows Firewall before you
> >> installed WinXP SP3?
> >>
> >>> Yes I have put some of the sites into always allow.
> >>
> >> Does that include yahoo.com, ebay.com, and all of your forums (e.g.,
> >> pcqanda.com)?
> >>
> >>
> >> Mike wrote:
> >>> Was on PC Q&A said IE6 was the problem.
> >>> Its OK I quite like IE7
> >>>
> >>> OK re Norton, no Ghost is my main back up and this is why you see the
> >>> Norton
> >>> stuff.
> >>> I don't use the Nero thing at all.
> >>>
> >>> Been running Avira for some time now, AVG prior to that.
> >>>
> >>> The problem occured when I was usinging IE6.
> >>> I installed IE7 after the June updates.
> >>>
> >>> I have used spybot and its tea timer for many years now.
> >>>
> >>> Auto Complete, forms is the only unchecked box.
> >>>
> >>> Yes I have put some of the sites into always allow.
> >>>
> >>> I'll try the Zone alarm test and report back shortly.
> >>>
> >>> "PA Bear [MS MVP]" wrote:
> >>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this
> >>>>>>> problem
> >>>>>>> but...
> >>>>
> >>>> Who told you that, Mike?
> >>>>
> >>>> Did you only recently install Avira AntiVir and had you been running
> >>>> without any anti-virus protection until then?
> >>>>
> >>>> Your HijackThis log suggestes that you used to have a Norton
> >>>> application
> >>>> installed which included Norton Ghost and Norton AntiVirus (e.g.,
> >>>> Norton
> >>>> System Works) and that you attempted to remove NAV, leaving Ghost in
> >>>> place.
> >>>> Unfortunately, some NAV leftovers remain on your computer and these may
> >>>> be
> >>>> the culprit here.
> >>>>
> >>>> Since you have Nero BackItUp installed, do you still need Ghost?
> >>>>
> >>>> How long has Spybot been installed and Tea Timer enabled? Do you
> >>>> understand what Tea Timer does and how it does it?
> >>>>
> >>>> When did you install IE7, before or after you installed the June 2009
> >>>> updates?
> >>>>
> >>>> IE Tools | Internet Options | Content | AutoComplete | Settings | Use
> >>>> AutoComplete for: What options, if any, are checked/enabled here?
> >>>>
> >>>> IE Tools | Internet Options | Privacy | Sites: Are the sites giving you
> >>>> problems (e.g., Yahoo, eBay) listed in Managed Sites box with the
> >>>> "Always
> >>>> Allow" annotation?
> >>>>
> >>>> If you disable ZA and then enable the Windows Firewall, does the
> >>>> unwanted
> >>>> behavior persist?
> >>>> --
> >>>> ~Robear Dyer (PA Bear)
> >>>> MS MVP-IE, Mail, Security, Windows Client - since 2002
> >>>>
> >>>>
> >>>> Mike wrote:
> >>>>> Bit more of an update.
> >>>>>
> >>>>> I found Windows live safety scanner installed despite my not having
> >>>>> done
> >>>>> so!
> >>>>> Removed it thinking it was the reason for this but alas no.
> >>>>> Also, installed Firefox but it has the exact same problem.
> >>>>> The cookie will stand once but X out of IE twice and its gone.
> >>>>> I just have no idea what is doing this?
> >>>>>
> >>>>> Suspect updates maybe?
> >>>>>
> >>>>> KB969897
> >>>>>
> >>>>> KB938127-v2 (no info found)
> >>>>>
> >>>>> KB968537
> >>>>> KB969898
> >>>>> KB970238
> >>>>> KB961501
> >>>>>
> >>>>> Be nice to get some help on this I see I am not alone
> >>>>>
> >>>>> "Mike" wrote:
> >>>>>> Update.
> >>>>>>
> >>>>>> User log on cookies will not stand.
> >>>>>>
> >>>>>> Have scanned system in safe mode and no infections found.
> >>>>>>
> >>>>>> Using msconfig stopped all services and start ups other than MS ones.
> >>>>>>
> >>>>>> Problem continued.
> >>>>>>
> >>>>>> The browser (IE7) will store the cookie initially, it can be seen in
> >>>>>> the
> >>>>>> 'files' tab and if double clicked
> >>>>>> you can read the information in the cookie.
> >>>>>>
> >>>>>> If you shut down IE and go back in the cookie seems ok and you are
> >>>>>> still
> >>>>>> logged in.
> >>>>>>
> >>>>>> However, do it a second time and the cookie does not work.
> >>>>>> If you check the 'file' tab the cookie still shows but when you
> >>>>>> double
> >>>>>> click on it
> >>>>>> you get file/path not found error
> >>>>>>
> >>>>>> IE is set to medium.
> >>>>>>
> >>>>>> "Mike" wrote:
> >>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this
> >>>>>>> problem
> >>>>>>> but
> >>>>>>> it has not.
> >>>>>>> Towards the end of last week after a load of MS updates I suddenly
> >>>>>>> found
> >>>>>>> that I had to enter my log in details for all my sites like Yahoo,
> >>>>>>> ebay
> >>>>>>> and many forums.
> >>>>>>> Everytime I shut down IE I seemed to lose my log in cookies.
> >>>>>>>
> >>>>>>> Using IE7 I have checked to always allow session cookies, set the
> >>>>>>> security
> >>>>>>> to medium.
> >>>>>>> Cleared out all the caches, re built the cookies.
> >>>>>>> Made sure CC cleaner does not remove them.
> >>>>>>>
> >>>>>>> But nothing works, cookies won't stand.
> >>>>>>> They seem to be stored but when you click on them you get the error
> >>>>>>> that
> >>>>>>> they are not found!
> >>>>>>>
> >>>>>>> This is a real big pain.
> >>>>>>>
> >>>>>>> Here is a Hijack log in case anything there may help.
> >>>>>>> Please help this is driving me mad LOL
> >>>>>>>
> >>>>>>> Logfile of Trend Micro HijackThis v2.0.2
> >>>>>>> Scan saved at 23:45:43, on 13/06/2009
> >>>>>>> Platform: Windows XP SP3 (WinNT 5.01.2600)
> >>>>>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850)
> >>>>>>> Boot mode: Normal
> >>>>>>>
> >>>>>>> Running processes:
> >>>> <SNIP>
> >>>>>>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
> >>>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
> >>>> <SNIP>
> >>>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe
> >>>> <SNIP>
> >>>>>>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
> >>>>>>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe
> >>>> <SNIP>
> >>>>>>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
> >>>>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe
> >>>>>>> E:\WINDOWS\Explorer.EXE
> >>>>>>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
> >>>> <SNIP>
> >>>>>>> E:\WINDOWS\system32\RUNDLL32.EXE
> >>>>>>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe
> >>>> <SNIP>
> >>>>>>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe
> >>>> <SNIP>
> >>>>>>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
> >>>>
> >>>> <SNIP>
> >>>>>>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter -
> >>>>>>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
> >>>> <SNIP>
> >>>>>>> O2 - BHO: Google Gears Helper -
> >>>>>>> {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} -
> >>>>>>> E:\Program Files\Google\Google Gears\Internet
> >>>>>>> Explorer\0.5.21.0\gears.dll
> >>>> <SNIP>
> >>>>>>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone
> >>>>>>> Labs\ZoneAlarm\zlclient.exe
> >>>> <SNIP>
> >>>>>>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton
> >>>>>>> Ghost\Agent\GhostTray.exe
> >>>> <SNIP>
> >>>>>>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec
> >>>>>>> Shared\ccApp.exe
> >>>> <SNIP>
> >>>>>>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir
> >>>>>>> Desktop\avgnt.exe" /min
> >>>> <SNIP>
> >>>>>>> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot -
> >>>>>>> Search
> >>>>>>> &
> >>>>>>> Destroy\TeaTimer.exe
> >>>> <SNIP>
> >>>>>>> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) -
> >>>>>>> Avira
> >>>>>>> GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe
> >>>>>>> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH -
> >>>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe
> >>>> <SNIP>
> >>>>>>> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec
> >>>>>>> Corporation -
> >>>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
> >>>>>>> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec
> >>>>>>> Corporation - E:\Program Files\Common Files\Symantec
> >>>>>>> Shared\ccPwdSvc.exe
> >>>>>>> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec
> >>>>>>> Corporation - E:\Program Files\Common Files\Symantec
> >>>>>>> Shared\ccSetMgr.exe <SNIP> O23 - Service: Norton Ghost - Symantec
> >>>>>>> Corporation - E:\Program Files\Norton Ghost\Agent\VProSvc.exe
> >>>> <SNIP>
> >>>>>>> O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program
> >>>>>>> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe