Yes the problem continues!

But as I said above I have switched everything off using msconfig apart from
MS services and still the problem continues.
But I have disabled tea timer and the IE add on for now despite having no
trouble for years with it, I guess a update to spybot could have introduced
something.

"PA Bear [MS MVP]" wrote:

> Reposting:
> >> If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites in
> >> question & log-in, then (4) close the IE window without logging-out, (5)
> >> reboot, and (6) revisit the sites, does the behavior persist?
> >>
> >> HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409
> >>
> >> NB: If you don't fully understand what Tea Timer does and how it does it,
> >> leave it permanently disabled.
>
> Mike wrote:
> > OK stopping ZA made no differance sadly :-(
> >
> > "PA Bear [MS MVP]" wrote:
> >
> >>> Having real trouble posting here as well now
> >>
> >> You may prefer to access this newsgroup in your default newsreader (e.g.,
> >> Outlook Express). Click this link:
> >> news://msnews.microsoft.com/microsof...plorer.general
> >>
> >> You were going to test this behavior after disabling ZA and then enabling
> >> the Windows Firewall. What effect, if any, did that have?
> >>
> >> If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites in
> >> question & log-in, then (4) close the IE window without logging-out, (5)
> >> reboot, and (6) revisit the sites, does the behavior persist?
> >>
> >> HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409
> >>
> >> NB: If you don't fully understand what Tea Timer does and how it does it,
> >> leave it permanently disabled.
> >>
> >>> My system has worked for years without issue the only common change I
> >>> can
> >>> think of is the June updates.
> >>
> >> Sorry, I was under the impression that you were experiencing the unwanted
> >> behavior prior to installing the June Update and IE7. Try the above for
> >> now then we'll consider other options, Mike.
> >> --
> >> ~PA Bear
> >>
> >> Mike wrote:
> >>> Having real trouble posting here as well now :-(
> >>>
> >>> Yes to all your questons.
> >>> I have taken all steps I can think of to isolate the cause including
> >>> stoping
> >>> all services and start ups other than MS ones.
> >>>
> >>> My system has worked for years without issue the only common changeI can
> >>> think of is the June updates.
> >>>
> >>> I'll give it a few hours and see if my other full reply shows up!
> >>>
> >>> "PA Bear [MS MVP]" wrote:
> >>>>> Was on PC Q&A said IE6 was the problem.
> >>>>
> >>>> I doubt it.
> >>>>
> >>>>> OK re Norton, no Ghost is my main back up and this is why you see the
> >>>>> Norton stuff.
> >>>>
> >>>> Nevertheless, there are some leftovers from Norton System Works and
> >>>> they
> >>>> may have something to do with your problems. Unfortunately, the only
> >>>> way
> >>>> to get rid of them would also remove Ghost.
> >>>>
> >>>>> I don't use the Nero thing at all.
> >>>>
> >>>> Then why is it still installed & loading at boot?
> >>>>
> >>>>> Been running Avira for some time now, AVG prior to that.
> >>>>
> >>>> The Norton leftovers may have compromised the installs of both Avira
> >>>> and
> >>>> AVG.
> >>>>
> >>>>> The problem occured when I was usinging IE6.
> >>>>> I installed IE7 after the June updates.
> >>>>
> >>>> Then neither IE7 nor the June updates are causing your problems.
> >>>>
> >>>>> I have used spybot and its tea timer for many years now.
> >>>>
> >>>> Again, do you understand what Tea Timer does and how it does it?
> >>>>
> >>>> Did you disable (1) Tea Timer & SDHelper, (2) your anti-virus
> >>>> application,
> >>>> and (3) ZoneAlarm *and then* (4) enable the Windows Firewall before you
> >>>> installed WinXP SP3?
> >>>>
> >>>>> Yes I have put some of the sites into always allow.
> >>>>
> >>>> Does that include yahoo.com, ebay.com, and all of your forums (e.g.,
> >>>> pcqanda.com)?
> >>>>
> >>>>
> >>>> Mike wrote:
> >>>>> Was on PC Q&A said IE6 was the problem.
> >>>>> Its OK I quite like IE7
> >>>>>
> >>>>> OK re Norton, no Ghost is my main back up and this is why you see the
> >>>>> Norton
> >>>>> stuff.
> >>>>> I don't use the Nero thing at all.
> >>>>>
> >>>>> Been running Avira for some time now, AVG prior to that.
> >>>>>
> >>>>> The problem occured when I was usinging IE6.
> >>>>> I installed IE7 after the June updates.
> >>>>>
> >>>>> I have used spybot and its tea timer for many years now.
> >>>>>
> >>>>> Auto Complete, forms is the only unchecked box.
> >>>>>
> >>>>> Yes I have put some of the sites into always allow.
> >>>>>
> >>>>> I'll try the Zone alarm test and report back shortly.
> >>>>>
> >>>>> "PA Bear [MS MVP]" wrote:
> >>>>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this
> >>>>>>>>> problem
> >>>>>>>>> but...
> >>>>>>
> >>>>>> Who told you that, Mike?
> >>>>>>
> >>>>>> Did you only recently install Avira AntiVir and had you been running
> >>>>>> without any anti-virus protection until then?
> >>>>>>
> >>>>>> Your HijackThis log suggestes that you used to have a Norton
> >>>>>> application
> >>>>>> installed which included Norton Ghost and Norton AntiVirus (e.g.,
> >>>>>> Norton
> >>>>>> System Works) and that you attempted to remove NAV, leaving Ghost in
> >>>>>> place.
> >>>>>> Unfortunately, some NAV leftovers remain on your computer and these
> >>>>>> may
> >>>>>> be
> >>>>>> the culprit here.
> >>>>>>
> >>>>>> Since you have Nero BackItUp installed, do you still need Ghost?
> >>>>>>
> >>>>>> How long has Spybot been installed and Tea Timer enabled? Do you
> >>>>>> understand what Tea Timer does and how it does it?
> >>>>>>
> >>>>>> When did you install IE7, before or after you installed the June 2009
> >>>>>> updates?
> >>>>>>
> >>>>>> IE Tools | Internet Options | Content | AutoComplete | Settings | Use
> >>>>>> AutoComplete for: What options, if any, are checked/enabled here?
> >>>>>>
> >>>>>> IE Tools | Internet Options | Privacy | Sites: Are the sites giving
> >>>>>> you
> >>>>>> problems (e.g., Yahoo, eBay) listed in Managed Sites box with the
> >>>>>> "Always
> >>>>>> Allow" annotation?
> >>>>>>
> >>>>>> If you disable ZA and then enable the Windows Firewall, does the
> >>>>>> unwanted
> >>>>>> behavior persist?
> >>>>>> --
> >>>>>> ~Robear Dyer (PA Bear)
> >>>>>> MS MVP-IE, Mail, Security, Windows Client - since 2002
> >>>>>>
> >>>>>>
> >>>>>> Mike wrote:
> >>>>>>> Bit more of an update.
> >>>>>>>
> >>>>>>> I found Windows live safety scanner installed despite my not having
> >>>>>>> done
> >>>>>>> so!
> >>>>>>> Removed it thinking it was the reason for this but alas no.
> >>>>>>> Also, installed Firefox but it has the exact same problem.
> >>>>>>> The cookie will stand once but X out of IE twice and its gone.
> >>>>>>> I just have no idea what is doing this?
> >>>>>>>
> >>>>>>> Suspect updates maybe?
> >>>>>>>
> >>>>>>> KB969897
> >>>>>>>
> >>>>>>> KB938127-v2 (no info found)
> >>>>>>>
> >>>>>>> KB968537
> >>>>>>> KB969898
> >>>>>>> KB970238
> >>>>>>> KB961501
> >>>>>>>
> >>>>>>> Be nice to get some help on this I see I am not alone
> >>>>>>>
> >>>>>>> "Mike" wrote:
> >>>>>>>> Update.
> >>>>>>>>
> >>>>>>>> User log on cookies will not stand.
> >>>>>>>>
> >>>>>>>> Have scanned system in safe mode and no infections found.
> >>>>>>>>
> >>>>>>>> Using msconfig stopped all services and start ups other than MS
> >>>>>>>> ones.
> >>>>>>>>
> >>>>>>>> Problem continued.
> >>>>>>>>
> >>>>>>>> The browser (IE7) will store the cookie initially, it can be seen
> >>>>>>>> in
> >>>>>>>> the
> >>>>>>>> 'files' tab and if double clicked
> >>>>>>>> you can read the information in the cookie.
> >>>>>>>>
> >>>>>>>> If you shut down IE and go back in the cookie seems ok and you are
> >>>>>>>> still
> >>>>>>>> logged in.
> >>>>>>>>
> >>>>>>>> However, do it a second time and the cookie does not work.
> >>>>>>>> If you check the 'file' tab the cookie still shows but when you
> >>>>>>>> double
> >>>>>>>> click on it
> >>>>>>>> you get file/path not found error
> >>>>>>>>
> >>>>>>>> IE is set to medium.
> >>>>>>>>
> >>>>>>>> "Mike" wrote:
> >>>>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this
> >>>>>>>>> problem
> >>>>>>>>> but
> >>>>>>>>> it has not.
> >>>>>>>>> Towards the end of last week after a load of MS updates I suddenly
> >>>>>>>>> found
> >>>>>>>>> that I had to enter my log in details for all my sites like Yahoo,
> >>>>>>>>> ebay
> >>>>>>>>> and many forums.
> >>>>>>>>> Everytime I shut down IE I seemed to lose my log in cookies.
> >>>>>>>>>
> >>>>>>>>> Using IE7 I have checked to always allow session cookies, set the
> >>>>>>>>> security
> >>>>>>>>> to medium.
> >>>>>>>>> Cleared out all the caches, re built the cookies.
> >>>>>>>>> Made sure CC cleaner does not remove them.
> >>>>>>>>>
> >>>>>>>>> But nothing works, cookies won't stand.
> >>>>>>>>> They seem to be stored but when you click on them you get the
> >>>>>>>>> error
> >>>>>>>>> that
> >>>>>>>>> they are not found!
> >>>>>>>>>
> >>>>>>>>> This is a real big pain.
> >>>>>>>>>
> >>>>>>>>> Here is a Hijack log in case anything there may help.
> >>>>>>>>> Please help this is driving me mad LOL
> >>>>>>>>>
> >>>>>>>>> Logfile of Trend Micro HijackThis v2.0.2
> >>>>>>>>> Scan saved at 23:45:43, on 13/06/2009
> >>>>>>>>> Platform: Windows XP SP3 (WinNT 5.01.2600)
> >>>>>>>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850)
> >>>>>>>>> Boot mode: Normal
> >>>>>>>>>
> >>>>>>>>> Running processes:
> >>>>>> <SNIP>
> >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
> >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
> >>>>>> <SNIP>
> >>>>>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe
> >>>>>> <SNIP>
> >>>>>>>>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
> >>>>>>>>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe
> >>>>>> <SNIP>
> >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
> >>>>>>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe
> >>>>>>>>> E:\WINDOWS\Explorer.EXE
> >>>>>>>>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
> >>>>>> <SNIP>
> >>>>>>>>> E:\WINDOWS\system32\RUNDLL32.EXE
> >>>>>>>>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe
> >>>>>> <SNIP>
> >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe
> >>>>>> <SNIP>
> >>>>>>>>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
> >>>>>>
> >>>>>> <SNIP>
> >>>>>>>>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter -
> >>>>>>>>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
> >>>>>> <SNIP>
> >>>>>>>>> O2 - BHO: Google Gears Helper -
> >>>>>>>>> {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} -
> >>>>>>>>> E:\Program Files\Google\Google Gears\Internet
> >>>>>>>>> Explorer\0.5.21.0\gears.dll
> >>>>>> <SNIP>
> >>>>>>>>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone
> >>>>>>>>> Labs\ZoneAlarm\zlclient.exe
> >>>>>> <SNIP>
> >>>>>>>>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton
> >>>>>>>>> Ghost\Agent\GhostTray.exe
> >>>>>> <SNIP>
> >>>>>>>>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec
> >>>>>>>>> Shared\ccApp.exe
> >>>>>> <SNIP>
> >>>>>>>>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir
> >>>>>>>>> Desktop\avgnt.exe" /min
> >>>>>> <SNIP>