No, it is not normal. Are absolutely, 100% positively sure that Tea Timer's
been disabled, Mike?

One or more options/settings in an ever-growing number of third-party
applications may be disallowing all these changes from "sticking" after
closing IE or rebooting. These include anti-spyware applications (e.g.,
Ad-aware's Ad-Watch, Spybot **Tea Timer**, SpywareBlaster, SpySweeper,
Spyware Doctor, CounterSpy, WinPatrol, etc), anti-virus applications &
security suites (Norton, McAfee, ESET/NOD32, Kasperky, Trend Micro, etc.),
and third-party firewalls (e.g., **Zone Alarm**, etc.).

Note that temporarily disabling the application(s) or rebooting into Safe
Mode may not disable the application's system protections.

I still suspect ZoneAlarm (Free?) is the responsible party here. (Note that
simply disabling ZA temporarily will not disable it's "system protections.")
I'll give you two recommendations/options:

#1 => Post about these unwanted behaviors in the appropriate ZA forum:
http://forums.zonelabs.com/zonelabs


#2 => Disable all ZA "system protections" and then uninstall ZA. Be sure to
enable the Windows Firewall after doing so!

Best of luck.


Mike wrote:
> I just noticed another weird thing!
>
> When you add a site to the priovacy tab 'always allow' option it appears
> at
> the bottom of the list of 'always block' however when you log out of IE
> and
> go back the allowed entery is missing!
>
> Is this normal?
>
> "Mike" wrote:
>> Yes the problem continues!
>>
>> But as I said above I have switched everything off using msconfig apart
>> from MS services and still the problem continues.
>> But I have disabled tea timer and the IE add on for now despite having no
>> trouble for years with it, I guess a update to spybot could have
>> introduced
>> something.
>>
>> "PA Bear [MS MVP]" wrote:
>>
>>> Reposting:
>>>>> If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites
>>>>> in
>>>>> question & log-in, then (4) close the IE window without logging-out,
>>>>> (5)
>>>>> reboot, and (6) revisit the sites, does the behavior persist?
>>>>>
>>>>> HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409
>>>>>
>>>>> NB: If you don't fully understand what Tea Timer does and how it does
>>>>> it, leave it permanently disabled.
>>>
>>> Mike wrote:
>>>> OK stopping ZA made no differance sadly :-(
>>>>
>>>> "PA Bear [MS MVP]" wrote:
>>>>
>>>>>> Having real trouble posting here as well now
>>>>>
>>>>> You may prefer to access this newsgroup in your default newsreader
>>>>> (e.g., Outlook Express). Click this link:
>>>>> news://msnews.microsoft.com/microsof...plorer.general
>>>>>
>>>>> You were going to test this behavior after disabling ZA and then
>>>>> enabling the Windows Firewall. What effect, if any, did that have?
>>>>>
>>>>> If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites
>>>>> in
>>>>> question & log-in, then (4) close the IE window without logging-out,
>>>>> (5)
>>>>> reboot, and (6) revisit the sites, does the behavior persist?
>>>>>
>>>>> HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409
>>>>>
>>>>> NB: If you don't fully understand what Tea Timer does and how it does
>>>>> it, leave it permanently disabled.
>>>>>
>>>>>> My system has worked for years without issue the only common change I
>>>>>> can
>>>>>> think of is the June updates.
>>>>>
>>>>> Sorry, I was under the impression that you were experiencing the
>>>>> unwanted behavior prior to installing the June Update and IE7. Try
>>>>> the
>>>>> above for now then we'll consider other options, Mike.
>>>>> --
>>>>> ~PA Bear
>>>>>
>>>>> Mike wrote:
>>>>>> Having real trouble posting here as well now :-(
>>>>>>
>>>>>> Yes to all your questons.
>>>>>> I have taken all steps I can think of to isolate the cause including
>>>>>> stoping
>>>>>> all services and start ups other than MS ones.
>>>>>>
>>>>>> My system has worked for years without issue the only common changeI
>>>>>> can think of is the June updates.
>>>>>>
>>>>>> I'll give it a few hours and see if my other full reply shows up!
>>>>>>
>>>>>> "PA Bear [MS MVP]" wrote:
>>>>>>>> Was on PC Q&A said IE6 was the problem.
>>>>>>>
>>>>>>> I doubt it.
>>>>>>>
>>>>>>>> OK re Norton, no Ghost is my main back up and this is why you see
>>>>>>>> the
>>>>>>>> Norton stuff.
>>>>>>>
>>>>>>> Nevertheless, there are some leftovers from Norton System Works and
>>>>>>> they
>>>>>>> may have something to do with your problems. Unfortunately, the
>>>>>>> only
>>>>>>> way
>>>>>>> to get rid of them would also remove Ghost.
>>>>>>>
>>>>>>>> I don't use the Nero thing at all.
>>>>>>>
>>>>>>> Then why is it still installed & loading at boot?
>>>>>>>
>>>>>>>> Been running Avira for some time now, AVG prior to that.
>>>>>>>
>>>>>>> The Norton leftovers may have compromised the installs of both Avira
>>>>>>> and
>>>>>>> AVG.
>>>>>>>
>>>>>>>> The problem occured when I was usinging IE6.
>>>>>>>> I installed IE7 after the June updates.
>>>>>>>
>>>>>>> Then neither IE7 nor the June updates are causing your problems.
>>>>>>>
>>>>>>>> I have used spybot and its tea timer for many years now.
>>>>>>>
>>>>>>> Again, do you understand what Tea Timer does and how it does it?
>>>>>>>
>>>>>>> Did you disable (1) Tea Timer & SDHelper, (2) your anti-virus
>>>>>>> application,
>>>>>>> and (3) ZoneAlarm *and then* (4) enable the Windows Firewall before
>>>>>>> you installed WinXP SP3?
>>>>>>>
>>>>>>>> Yes I have put some of the sites into always allow.
>>>>>>>
>>>>>>> Does that include yahoo.com, ebay.com, and all of your forums (e.g.,
>>>>>>> pcqanda.com)?
>>>>>>>
>>>>>>>
>>>>>>> Mike wrote:
>>>>>>>> Was on PC Q&A said IE6 was the problem.
>>>>>>>> Its OK I quite like IE7
>>>>>>>>
>>>>>>>> OK re Norton, no Ghost is my main back up and this is why you see
>>>>>>>> the
>>>>>>>> Norton
>>>>>>>> stuff.
>>>>>>>> I don't use the Nero thing at all.
>>>>>>>>
>>>>>>>> Been running Avira for some time now, AVG prior to that.
>>>>>>>>
>>>>>>>> The problem occured when I was usinging IE6.
>>>>>>>> I installed IE7 after the June updates.
>>>>>>>>
>>>>>>>> I have used spybot and its tea timer for many years now.
>>>>>>>>
>>>>>>>> Auto Complete, forms is the only unchecked box.
>>>>>>>>
>>>>>>>> Yes I have put some of the sites into always allow.
>>>>>>>>
>>>>>>>> I'll try the Zone alarm test and report back shortly.
>>>>>>>>
>>>>>>>> "PA Bear [MS MVP]" wrote:
>>>>>>>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this
>>>>>>>>>>>> problem
>>>>>>>>>>>> but...
>>>>>>>>>
>>>>>>>>> Who told you that, Mike?
>>>>>>>>>
>>>>>>>>> Did you only recently install Avira AntiVir and had you been
>>>>>>>>> running
>>>>>>>>> without any anti-virus protection until then?
>>>>>>>>>
>>>>>>>>> Your HijackThis log suggestes that you used to have a Norton
>>>>>>>>> application
>>>>>>>>> installed which included Norton Ghost and Norton AntiVirus (e.g.,
>>>>>>>>> Norton
>>>>>>>>> System Works) and that you attempted to remove NAV, leaving Ghost
>>>>>>>>> in
>>>>>>>>> place.
>>>>>>>>> Unfortunately, some NAV leftovers remain on your computer and
>>>>>>>>> these
>>>>>>>>> may
>>>>>>>>> be
>>>>>>>>> the culprit here.
>>>>>>>>>
>>>>>>>>> Since you have Nero BackItUp installed, do you still need Ghost?
>>>>>>>>>
>>>>>>>>> How long has Spybot been installed and Tea Timer enabled? Do you
>>>>>>>>> understand what Tea Timer does and how it does it?
>>>>>>>>>
>>>>>>>>> When did you install IE7, before or after you installed the June
>>>>>>>>> 2009 updates?
>>>>>>>>>
>>>>>>>>> IE Tools | Internet Options | Content | AutoComplete | Settings |
>>>>>>>>> Use AutoComplete for: What options, if any, are checked/enabled
>>>>>>>>> here?
>>>>>>>>>
>>>>>>>>> IE Tools | Internet Options | Privacy | Sites: Are the sites
>>>>>>>>> giving
>>>>>>>>> you
>>>>>>>>> problems (e.g., Yahoo, eBay) listed in Managed Sites box with the
>>>>>>>>> "Always
>>>>>>>>> Allow" annotation?
>>>>>>>>>
>>>>>>>>> If you disable ZA and then enable the Windows Firewall, does the
>>>>>>>>> unwanted
>>>>>>>>> behavior persist?
>>>>>>>>> --
>>>>>>>>> ~Robear Dyer (PA Bear)
>>>>>>>>> MS MVP-IE, Mail, Security, Windows Client - since 2002
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Mike wrote:
>>>>>>>>>> Bit more of an update.
>>>>>>>>>>
>>>>>>>>>> I found Windows live safety scanner installed despite my not
>>>>>>>>>> having
>>>>>>>>>> done
>>>>>>>>>> so!
>>>>>>>>>> Removed it thinking it was the reason for this but alas no.
>>>>>>>>>> Also, installed Firefox but it has the exact same problem.
>>>>>>>>>> The cookie will stand once but X out of IE twice and its gone.
>>>>>>>>>> I just have no idea what is doing this?
>>>>>>>>>>
>>>>>>>>>> Suspect updates maybe?
>>>>>>>>>>
>>>>>>>>>> KB969897
>>>>>>>>>>
>>>>>>>>>> KB938127-v2 (no info found)
>>>>>>>>>>
>>>>>>>>>> KB968537
>>>>>>>>>> KB969898
>>>>>>>>>> KB970238
>>>>>>>>>> KB961501
>>>>>>>>>>
>>>>>>>>>> Be nice to get some help on this I see I am not alone
>>>>>>>>>>
>>>>>>>>>> "Mike" wrote:
>>>>>>>>>>> Update.
>>>>>>>>>>>
>>>>>>>>>>> User log on cookies will not stand.
>>>>>>>>>>>
>>>>>>>>>>> Have scanned system in safe mode and no infections found.
>>>>>>>>>>>
>>>>>>>>>>> Using msconfig stopped all services and start ups other than MS
>>>>>>>>>>> ones.
>>>>>>>>>>>
>>>>>>>>>>> Problem continued.
>>>>>>>>>>>
>>>>>>>>>>> The browser (IE7) will store the cookie initially, it can be
>>>>>>>>>>> seen
>>>>>>>>>>> in
>>>>>>>>>>> the
>>>>>>>>>>> 'files' tab and if double clicked
>>>>>>>>>>> you can read the information in the cookie.
>>>>>>>>>>>
>>>>>>>>>>> If you shut down IE and go back in the cookie seems ok and you
>>>>>>>>>>> are
>>>>>>>>>>> still
>>>>>>>>>>> logged in.
>>>>>>>>>>>
>>>>>>>>>>> However, do it a second time and the cookie does not work.
>>>>>>>>>>> If you check the 'file' tab the cookie still shows but when you
>>>>>>>>>>> double
>>>>>>>>>>> click on it
>>>>>>>>>>> you get file/path not found error
>>>>>>>>>>>
>>>>>>>>>>> IE is set to medium.
>>>>>>>>>>>
>>>>>>>>>>> "Mike" wrote:
>>>>>>>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this
>>>>>>>>>>>> problem
>>>>>>>>>>>> but
>>>>>>>>>>>> it has not.
>>>>>>>>>>>> Towards the end of last week after a load of MS updates I
>>>>>>>>>>>> suddenly found
>>>>>>>>>>>> that I had to enter my log in details for all my sites like
>>>>>>>>>>>> Yahoo, ebay
>>>>>>>>>>>> and many forums.
>>>>>>>>>>>> Everytime I shut down IE I seemed to lose my log in cookies.
>>>>>>>>>>>>
>>>>>>>>>>>> Using IE7 I have checked to always allow session cookies, set
>>>>>>>>>>>> the
>>>>>>>>>>>> security
>>>>>>>>>>>> to medium.
>>>>>>>>>>>> Cleared out all the caches, re built the cookies.
>>>>>>>>>>>> Made sure CC cleaner does not remove them.
>>>>>>>>>>>>
>>>>>>>>>>>> But nothing works, cookies won't stand.
>>>>>>>>>>>> They seem to be stored but when you click on them you get the
>>>>>>>>>>>> error
>>>>>>>>>>>> that
>>>>>>>>>>>> they are not found!
>>>>>>>>>>>>
>>>>>>>>>>>> This is a real big pain.
>>>>>>>>>>>>
>>>>>>>>>>>> Here is a Hijack log in case anything there may help.
>>>>>>>>>>>> Please help this is driving me mad LOL
>>>>>>>>>>>>
>>>>>>>>>>>> Logfile of Trend Micro HijackThis v2.0.2
>>>>>>>>>>>> Scan saved at 23:45:43, on 13/06/2009
>>>>>>>>>>>> Platform: Windows XP SP3 (WinNT 5.01.2600)
>>>>>>>>>>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850)
>>>>>>>>>>>> Boot mode: Normal
>>>>>>>>>>>>
>>>>>>>>>>>> Running processes:
>>>>>>>>> <SNIP>
>>>>>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
>>>>>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
>>>>>>>>> <SNIP>
>>>>>>>>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe
>>>>>>>>> <SNIP>
>>>>>>>>>>>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
>>>>>>>>>>>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe
>>>>>>>>> <SNIP>
>>>>>>>>>>>> E:\Program Files\Common Files\Symantec
>>>>>>>>>>>> Shared\CCPD-LC\symlcsvc.exe
>>>>>>>>>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe
>>>>>>>>>>>> E:\WINDOWS\Explorer.EXE
>>>>>>>>>>>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
>>>>>>>>> <SNIP>
>>>>>>>>>>>> E:\WINDOWS\system32\RUNDLL32.EXE
>>>>>>>>>>>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe
>>>>>>>>> <SNIP>
>>>>>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe
>>>>>>>>> <SNIP>
>>>>>>>>>>>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
>>>>>>>>>
>>>>>>>>> <SNIP>
>>>>>>>>>>>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter -
>>>>>>>>>>>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
>>>>>>>>> <SNIP>
>>>>>>>>>>>> O2 - BHO: Google Gears Helper -
>>>>>>>>>>>> {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} -
>>>>>>>>>>>> E:\Program Files\Google\Google Gears\Internet
>>>>>>>>>>>> Explorer\0.5.21.0\gears.dll
>>>>>>>>> <SNIP>
>>>>>>>>>>>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone
>>>>>>>>>>>> Labs\ZoneAlarm\zlclient.exe