View Single Post
  #13 (permalink)  
Old 06-15-2009, 04:50 PM
PA Bear [MS MVP]
Newsgroup Contributor
 
Posts: n/a
Re: Lost log in cookies

Reposting:
>> If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites in
>> question & log-in, then (4) close the IE window without logging-out, (5)
>> reboot, and (6) revisit the sites, does the behavior persist?
>>
>> HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409
>>
>> NB: If you don't fully understand what Tea Timer does and how it does it,
>> leave it permanently disabled.


Mike wrote:
> OK stopping ZA made no differance sadly :-(
>
> "PA Bear [MS MVP]" wrote:
>
>>> Having real trouble posting here as well now

>>
>> You may prefer to access this newsgroup in your default newsreader (e.g.,
>> Outlook Express). Click this link:
>> news://msnews.microsoft.com/microsof...plorer.general
>>
>> You were going to test this behavior after disabling ZA and then enabling
>> the Windows Firewall. What effect, if any, did that have?
>>
>> If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites in
>> question & log-in, then (4) close the IE window without logging-out, (5)
>> reboot, and (6) revisit the sites, does the behavior persist?
>>
>> HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409
>>
>> NB: If you don't fully understand what Tea Timer does and how it does it,
>> leave it permanently disabled.
>>
>>> My system has worked for years without issue the only common change I
>>> can
>>> think of is the June updates.

>>
>> Sorry, I was under the impression that you were experiencing the unwanted
>> behavior prior to installing the June Update and IE7. Try the above for
>> now then we'll consider other options, Mike.
>> --
>> ~PA Bear
>>
>> Mike wrote:
>>> Having real trouble posting here as well now :-(
>>>
>>> Yes to all your questons.
>>> I have taken all steps I can think of to isolate the cause including
>>> stoping
>>> all services and start ups other than MS ones.
>>>
>>> My system has worked for years without issue the only common changeI can
>>> think of is the June updates.
>>>
>>> I'll give it a few hours and see if my other full reply shows up!
>>>
>>> "PA Bear [MS MVP]" wrote:
>>>>> Was on PC Q&A said IE6 was the problem.
>>>>
>>>> I doubt it.
>>>>
>>>>> OK re Norton, no Ghost is my main back up and this is why you see the
>>>>> Norton stuff.
>>>>
>>>> Nevertheless, there are some leftovers from Norton System Works and
>>>> they
>>>> may have something to do with your problems. Unfortunately, the only
>>>> way
>>>> to get rid of them would also remove Ghost.
>>>>
>>>>> I don't use the Nero thing at all.
>>>>
>>>> Then why is it still installed & loading at boot?
>>>>
>>>>> Been running Avira for some time now, AVG prior to that.
>>>>
>>>> The Norton leftovers may have compromised the installs of both Avira
>>>> and
>>>> AVG.
>>>>
>>>>> The problem occured when I was usinging IE6.
>>>>> I installed IE7 after the June updates.
>>>>
>>>> Then neither IE7 nor the June updates are causing your problems.
>>>>
>>>>> I have used spybot and its tea timer for many years now.
>>>>
>>>> Again, do you understand what Tea Timer does and how it does it?
>>>>
>>>> Did you disable (1) Tea Timer & SDHelper, (2) your anti-virus
>>>> application,
>>>> and (3) ZoneAlarm *and then* (4) enable the Windows Firewall before you
>>>> installed WinXP SP3?
>>>>
>>>>> Yes I have put some of the sites into always allow.
>>>>
>>>> Does that include yahoo.com, ebay.com, and all of your forums (e.g.,
>>>> pcqanda.com)?
>>>>
>>>>
>>>> Mike wrote:
>>>>> Was on PC Q&A said IE6 was the problem.
>>>>> Its OK I quite like IE7
>>>>>
>>>>> OK re Norton, no Ghost is my main back up and this is why you see the
>>>>> Norton
>>>>> stuff.
>>>>> I don't use the Nero thing at all.
>>>>>
>>>>> Been running Avira for some time now, AVG prior to that.
>>>>>
>>>>> The problem occured when I was usinging IE6.
>>>>> I installed IE7 after the June updates.
>>>>>
>>>>> I have used spybot and its tea timer for many years now.
>>>>>
>>>>> Auto Complete, forms is the only unchecked box.
>>>>>
>>>>> Yes I have put some of the sites into always allow.
>>>>>
>>>>> I'll try the Zone alarm test and report back shortly.
>>>>>
>>>>> "PA Bear [MS MVP]" wrote:
>>>>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this
>>>>>>>>> problem
>>>>>>>>> but...
>>>>>>
>>>>>> Who told you that, Mike?
>>>>>>
>>>>>> Did you only recently install Avira AntiVir and had you been running
>>>>>> without any anti-virus protection until then?
>>>>>>
>>>>>> Your HijackThis log suggestes that you used to have a Norton
>>>>>> application
>>>>>> installed which included Norton Ghost and Norton AntiVirus (e.g.,
>>>>>> Norton
>>>>>> System Works) and that you attempted to remove NAV, leaving Ghost in
>>>>>> place.
>>>>>> Unfortunately, some NAV leftovers remain on your computer and these
>>>>>> may
>>>>>> be
>>>>>> the culprit here.
>>>>>>
>>>>>> Since you have Nero BackItUp installed, do you still need Ghost?
>>>>>>
>>>>>> How long has Spybot been installed and Tea Timer enabled? Do you
>>>>>> understand what Tea Timer does and how it does it?
>>>>>>
>>>>>> When did you install IE7, before or after you installed the June 2009
>>>>>> updates?
>>>>>>
>>>>>> IE Tools | Internet Options | Content | AutoComplete | Settings | Use
>>>>>> AutoComplete for: What options, if any, are checked/enabled here?
>>>>>>
>>>>>> IE Tools | Internet Options | Privacy | Sites: Are the sites giving
>>>>>> you
>>>>>> problems (e.g., Yahoo, eBay) listed in Managed Sites box with the
>>>>>> "Always
>>>>>> Allow" annotation?
>>>>>>
>>>>>> If you disable ZA and then enable the Windows Firewall, does the
>>>>>> unwanted
>>>>>> behavior persist?
>>>>>> --
>>>>>> ~Robear Dyer (PA Bear)
>>>>>> MS MVP-IE, Mail, Security, Windows Client - since 2002
>>>>>>
>>>>>>
>>>>>> Mike wrote:
>>>>>>> Bit more of an update.
>>>>>>>
>>>>>>> I found Windows live safety scanner installed despite my not having
>>>>>>> done
>>>>>>> so!
>>>>>>> Removed it thinking it was the reason for this but alas no.
>>>>>>> Also, installed Firefox but it has the exact same problem.
>>>>>>> The cookie will stand once but X out of IE twice and its gone.
>>>>>>> I just have no idea what is doing this?
>>>>>>>
>>>>>>> Suspect updates maybe?
>>>>>>>
>>>>>>> KB969897
>>>>>>>
>>>>>>> KB938127-v2 (no info found)
>>>>>>>
>>>>>>> KB968537
>>>>>>> KB969898
>>>>>>> KB970238
>>>>>>> KB961501
>>>>>>>
>>>>>>> Be nice to get some help on this I see I am not alone
>>>>>>>
>>>>>>> "Mike" wrote:
>>>>>>>> Update.
>>>>>>>>
>>>>>>>> User log on cookies will not stand.
>>>>>>>>
>>>>>>>> Have scanned system in safe mode and no infections found.
>>>>>>>>
>>>>>>>> Using msconfig stopped all services and start ups other than MS
>>>>>>>> ones.
>>>>>>>>
>>>>>>>> Problem continued.
>>>>>>>>
>>>>>>>> The browser (IE7) will store the cookie initially, it can be seen
>>>>>>>> in
>>>>>>>> the
>>>>>>>> 'files' tab and if double clicked
>>>>>>>> you can read the information in the cookie.
>>>>>>>>
>>>>>>>> If you shut down IE and go back in the cookie seems ok and you are
>>>>>>>> still
>>>>>>>> logged in.
>>>>>>>>
>>>>>>>> However, do it a second time and the cookie does not work.
>>>>>>>> If you check the 'file' tab the cookie still shows but when you
>>>>>>>> double
>>>>>>>> click on it
>>>>>>>> you get file/path not found error
>>>>>>>>
>>>>>>>> IE is set to medium.
>>>>>>>>
>>>>>>>> "Mike" wrote:
>>>>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this
>>>>>>>>> problem
>>>>>>>>> but
>>>>>>>>> it has not.
>>>>>>>>> Towards the end of last week after a load of MS updates I suddenly
>>>>>>>>> found
>>>>>>>>> that I had to enter my log in details for all my sites like Yahoo,
>>>>>>>>> ebay
>>>>>>>>> and many forums.
>>>>>>>>> Everytime I shut down IE I seemed to lose my log in cookies.
>>>>>>>>>
>>>>>>>>> Using IE7 I have checked to always allow session cookies, set the
>>>>>>>>> security
>>>>>>>>> to medium.
>>>>>>>>> Cleared out all the caches, re built the cookies.
>>>>>>>>> Made sure CC cleaner does not remove them.
>>>>>>>>>
>>>>>>>>> But nothing works, cookies won't stand.
>>>>>>>>> They seem to be stored but when you click on them you get the
>>>>>>>>> error
>>>>>>>>> that
>>>>>>>>> they are not found!
>>>>>>>>>
>>>>>>>>> This is a real big pain.
>>>>>>>>>
>>>>>>>>> Here is a Hijack log in case anything there may help.
>>>>>>>>> Please help this is driving me mad LOL
>>>>>>>>>
>>>>>>>>> Logfile of Trend Micro HijackThis v2.0.2
>>>>>>>>> Scan saved at 23:45:43, on 13/06/2009
>>>>>>>>> Platform: Windows XP SP3 (WinNT 5.01.2600)
>>>>>>>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850)
>>>>>>>>> Boot mode: Normal
>>>>>>>>>
>>>>>>>>> Running processes:
>>>>>> <SNIP>
>>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
>>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
>>>>>> <SNIP>
>>>>>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe
>>>>>> <SNIP>
>>>>>>>>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
>>>>>>>>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe
>>>>>> <SNIP>
>>>>>>>>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
>>>>>>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe
>>>>>>>>> E:\WINDOWS\Explorer.EXE
>>>>>>>>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
>>>>>> <SNIP>
>>>>>>>>> E:\WINDOWS\system32\RUNDLL32.EXE
>>>>>>>>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe
>>>>>> <SNIP>
>>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe
>>>>>> <SNIP>
>>>>>>>>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
>>>>>>
>>>>>> <SNIP>
>>>>>>>>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter -
>>>>>>>>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
>>>>>> <SNIP>
>>>>>>>>> O2 - BHO: Google Gears Helper -
>>>>>>>>> {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} -
>>>>>>>>> E:\Program Files\Google\Google Gears\Internet
>>>>>>>>> Explorer\0.5.21.0\gears.dll
>>>>>> <SNIP>
>>>>>>>>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone
>>>>>>>>> Labs\ZoneAlarm\zlclient.exe
>>>>>> <SNIP>
>>>>>>>>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton
>>>>>>>>> Ghost\Agent\GhostTray.exe
>>>>>> <SNIP>
>>>>>>>>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec
>>>>>>>>> Shared\ccApp.exe
>>>>>> <SNIP>
>>>>>>>>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir
>>>>>>>>> Desktop\avgnt.exe" /min
>>>>>> <SNIP>
>>>>>>>>> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot -
>>>>>>>>> Search
>>>>>>>>> &
>>>>>>>>> Destroy\TeaTimer.exe
>>>>>> <SNIP>
>>>>>>>>> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) -
>>>>>>>>> Avira
>>>>>>>>> GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe
>>>>>>>>> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH -
>>>>>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe
>>>>>> <SNIP>
>>>>>>>>> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec
>>>>>>>>> Corporation -
>>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
>>>>>>>>> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec
>>>>>>>>> Corporation - E:\Program Files\Common Files\Symantec
>>>>>>>>> Shared\ccPwdSvc.exe
>>>>>>>>> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec
>>>>>>>>> Corporation - E:\Program Files\Common Files\Symantec
>>>>>>>>> Shared\ccSetMgr.exe <SNIP> O23 - Service: Norton Ghost - Symantec
>>>>>>>>> Corporation - E:\Program Files\Norton Ghost\Agent\VProSvc.exe
>>>>>>>>> <SNIP>
>>>>>>>>> O23 - Service: Symantec Core LC - Symantec Corporation -
>>>>>>>>> E:\Program
>>>>>>>>> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe


Reply With Quote

 
Old 06-15-2009, 04:50 PM