| |
06-13-2009, 03:50 PM
| |||
| |||
| Lost log in cookies HI, I was using IE 6 but was told to go to IE 7 to solve this problem but it has not. Towards the end of last week after a load of MS updates I suddenly found that I had to enter my log in details for all my sites like Yahoo, ebay and many forums. Everytime I shut down IE I seemed to lose my log in cookies. Using IE7 I have checked to always allow session cookies, set the security to medium. Cleared out all the caches, re built the cookies. Made sure CC cleaner does not remove them. But nothing works, cookies won't stand. They seem to be stored but when you click on them you get the error that they are not found! This is a real big pain. Here is a Hijack log in case anything there may help. Please help this is driving me mad LOL Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:45:43, on 13/06/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16850) Boot mode: Normal Running processes: E:\WINDOWS\System32\smss.exe E:\WINDOWS\system32\winlogon.exe E:\WINDOWS\system32\services.exe E:\WINDOWS\system32\lsass.exe E:\WINDOWS\system32\svchost.exe E:\WINDOWS\System32\svchost.exe E:\WINDOWS\system32\svchost.exe E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe E:\Program Files\Lavasoft\Ad-Aware\AAWService.exe E:\WINDOWS\system32\spoolsv.exe E:\Program Files\Avira\AntiVir Desktop\sched.exe E:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe E:\Program Files\Avira\AntiVir Desktop\avguard.exe E:\WINDOWS\System32\GEARSec.exe E:\Program Files\iolo\common\lib\ioloServiceManager.exe E:\Program Files\Google\Update\GoogleUpdate.exe E:\Program Files\Java\jre6\bin\jqs.exe E:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe E:\Program Files\Norton Ghost\Agent\VProSvc.exe E:\WINDOWS\system32\nvsvc32.exe E:\WINDOWS\system32\PGPsdkServ.exe E:\WINDOWS\system32\IoctlSvc.exe E:\Program Files\CyberLink\Shared Files\RichVideo.exe E:\WINDOWS\system32\tcpsvcs.exe E:\WINDOWS\System32\snmp.exe E:\WINDOWS\system32\svchost.exe E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe E:\WINDOWS\system32\ZoneLabs\vsmon.exe E:\WINDOWS\Explorer.EXE E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe E:\WINDOWS\System32\svchost.exe E:\WINDOWS\SOUNDMAN.EXE E:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2 a.exe E:\WINDOWS\system32\RUNDLL32.EXE E:\Program Files\Norton Ghost\Agent\GhostTray.exe E:\Program Files\Microsoft IntelliType Pro\itype.exe E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H 2.EXE E:\Program Files\Common Files\Symantec Shared\ccApp.exe E:\WINDOWS\system32\rundll32.exe E:\Program Files\Avira\AntiVir Desktop\avgnt.exe E:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe E:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe E:\Program Files\Olympus\DeviceDetector\DevDtct2.exe E:\Program Files\SpywareGuard\sgmain.exe E:\Program Files\SpywareGuard\sgbhp.exe E:\Program Files\PC Connectivity Solution\ServiceLayer.exe E:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe E:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe E:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe E:\Program Files\Internet Explorer\iexplore.exe E:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - E:\Program Files\SpywareGuard\dlprotect.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Encarta Web Companion Helper Object - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - E:\Program Files\Common Files\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - E:\Program Files\Google\Google Gears\Internet Explorer\0.5.21.0\gears.dll O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - E:\PROGRA~1\FlashFXP\IEFlash.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Encarta Web Companion - {147D6308-0614-4112-89B1-31402F9B82C4} - E:\Program Files\Common Files\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [SmartDefrag] "E:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe" /StartUp O4 - HKLM\..\Run: [pdfFactory Pro Dispatcher v2] "E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis 2a.exe" /source=HKLM O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton Ghost\Agent\GhostTray.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [itype] "E:\Program Files\Microsoft IntelliType Pro\itype.exe" O4 - HKLM\..\Run: [EPSON Stylus Photo R200 Series] E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H 2.EXE /P30 "EPSON Stylus Photo R200 Series" /O6 "USB001" /M "Stylus Photo R200" O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec Shared\ccApp.exe O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [ArcSoft Connection Service] E:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: SpywareGuard.lnk = ? O4 - Global Startup: Device Detector 3.lnk = ? O8 - Extra context menu item: &ieSpell Options - res://E:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM O8 - Extra context menu item: &Lookup Meaning - res://E:\Program Files\ieSpell\iespell.dll/LOOKUPMEANING.HTM O8 - Extra context menu item: Check &Spelling - res://E:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - E:\Program Files\Google\Google Gears\Internet Explorer\0.5.21.0\gears.dll O9 - Extra 'Tools' menuitem: &Gears Settings - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - E:\Program Files\Google\Google Gears\Internet Explorer\0.5.21.0\gears.dll O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - E:\Program Files\ieSpell\iespell.dll O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - E:\Program Files\ieSpell\iespell.dll O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - E:\Program Files\ieSpell\iespell.dll O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - E:\Program Files\ieSpell\iespell.dll O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - E:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - E:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe O10 - Unknown file in Winsock LSP: e:\windows\system32\mswsock32.dll O14 - IERESET.INF: START_PAGE_URL=http://www.orange.co.uk O16 - DPF: Garmin Communicator Plug-In - https://my.garmin.com/static/m/cab/2...nAxControl.CAB O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/...oUploader5.cab O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.nvidia.com/content/Driver...sysreqlab3.cab O16 - DPF: {26522409-8BBF-4C5B-A4D3-CF4B1D6F255B} - http://www.umediaserver.net/bin/UMediaControl5.cab O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} - O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} - O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} - http://www.nvidia.com/content/Driver...aSmartScan.cab O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} - http://www.crucial.com/controls/cpcScanner.cab O16 - DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} (Java Plug-in 1.5.0_04) - O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} (Java Plug-in 1.5.0_06) - O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} - O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - O17 - HKLM\System\CCS\Services\Tcpip\..\{A8F5FCA6-48BB-4538-8EE1-4BF55A385B87}: NameServer = 192.168.90.1 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - E:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - E:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - E:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Basics Service - Unknown owner - E:\Program Files\Seagate\Basics\Service\SyncServicesBasics.ex e (file missing) O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: GEARSecurity - GEAR Software - E:\WINDOWS\System32\GEARSec.exe O23 - Service: Google Update Service (gupdate1c92e10b050f0be) (gupdate1c92e10b050f0be) - Google Inc. - E:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner - E:\Program Files\iolo\common\lib\ioloServiceManager.exe O23 - Service: iolo System Service (ioloSystemService) - Unknown owner - E:\Program Files\iolo\common\lib\ioloServiceManager.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - E:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: Norton Ghost - Symantec Corporation - E:\Program Files\Norton Ghost\Agent\VProSvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\system32\nvsvc32.exe O23 - Service: PGPsdkService (PGPsdkServ) - PGP Corporation - E:\WINDOWS\system32\PGPsdkServ.exe O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - E:\WINDOWS\system32\IoctlSvc.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - E:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - E:\Program Files\WinPcap\rpcapd.exe O23 - Service: ServiceLayer - Nokia. - E:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - E:\WINDOWS\system32\ZoneLabs\vsmon.exe -- End of file - 13356 bytes      |
|
06-13-2009, 03:50 PM
| ||
| |
|
06-14-2009, 06:30 AM
| |||
| |||
| RE: Lost log in cookies Update. User log on cookies will not stand. Have scanned system in safe mode and no infections found. Using msconfig stopped all services and start ups other than MS ones. Problem continued. The browser (IE7) will store the cookie initially, it can be seen in the 'files' tab and if double clicked you can read the information in the cookie. If you shut down IE and go back in the cookie seems ok and you are still logged in. However, do it a second time and the cookie does not work. If you check the 'file' tab the cookie still shows but when you double click on it you get file/path not found error IE is set to medium. "Mike" wrote: > HI, I was using IE 6 but was told to go to IE 7 to solve this problem but it > has not. > Towards the end of last week after a load of MS updates I suddenly found > that I had to enter my log in details for all my sites like Yahoo, ebay and > many forums. > Everytime I shut down IE I seemed to lose my log in cookies. > > Using IE7 I have checked to always allow session cookies, set the security > to medium. > Cleared out all the caches, re built the cookies. > Made sure CC cleaner does not remove them. > > But nothing works, cookies won't stand. > They seem to be stored but when you click on them you get the error that > they are not found! > > This is a real big pain. > > Here is a Hijack log in case anything there may help. > Please help this is driving me mad LOL > > Logfile of Trend Micro HijackThis v2.0.2 > Scan saved at 23:45:43, on 13/06/2009 > Platform: Windows XP SP3 (WinNT 5.01.2600) > MSIE: Internet Explorer v7.00 (7.00.6000.16850) > Boot mode: Normal > > Running processes: > E:\WINDOWS\System32\smss.exe > E:\WINDOWS\system32\winlogon.exe > E:\WINDOWS\system32\services.exe > E:\WINDOWS\system32\lsass.exe > E:\WINDOWS\system32\svchost.exe > E:\WINDOWS\System32\svchost.exe > E:\WINDOWS\system32\svchost.exe > E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe > E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > E:\Program Files\Lavasoft\Ad-Aware\AAWService.exe > E:\WINDOWS\system32\spoolsv.exe > E:\Program Files\Avira\AntiVir Desktop\sched.exe > E:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe > E:\Program Files\Avira\AntiVir Desktop\avguard.exe > E:\WINDOWS\System32\GEARSec.exe > E:\Program Files\iolo\common\lib\ioloServiceManager.exe > E:\Program Files\Google\Update\GoogleUpdate.exe > E:\Program Files\Java\jre6\bin\jqs.exe > E:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE > E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe > E:\Program Files\Norton Ghost\Agent\VProSvc.exe > E:\WINDOWS\system32\nvsvc32.exe > E:\WINDOWS\system32\PGPsdkServ.exe > E:\WINDOWS\system32\IoctlSvc.exe > E:\Program Files\CyberLink\Shared Files\RichVideo.exe > E:\WINDOWS\system32\tcpsvcs.exe > E:\WINDOWS\System32\snmp.exe > E:\WINDOWS\system32\svchost.exe > E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > E:\WINDOWS\system32\ZoneLabs\vsmon.exe > E:\WINDOWS\Explorer.EXE > E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe > E:\WINDOWS\System32\svchost.exe > E:\WINDOWS\SOUNDMAN.EXE > E:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe > E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2 a.exe > E:\WINDOWS\system32\RUNDLL32.EXE > E:\Program Files\Norton Ghost\Agent\GhostTray.exe > E:\Program Files\Microsoft IntelliType Pro\itype.exe > E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H 2.EXE > E:\Program Files\Common Files\Symantec Shared\ccApp.exe > E:\WINDOWS\system32\rundll32.exe > E:\Program Files\Avira\AntiVir Desktop\avgnt.exe > E:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe > E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe > E:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe > E:\Program Files\Olympus\DeviceDetector\DevDtct2.exe > E:\Program Files\SpywareGuard\sgmain.exe > E:\Program Files\SpywareGuard\sgbhp.exe > E:\Program Files\PC Connectivity Solution\ServiceLayer.exe > E:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe > E:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe > E:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe > E:\Program Files\Internet Explorer\iexplore.exe > E:\Program Files\Trend Micro\HijackThis\HijackThis.exe > > R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = > http://go.microsoft.com/fwlink/?LinkId=69157 > R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} > - (no file) > O2 - BHO: Adobe PDF Reader Link Helper - > {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat > 7.0\ActiveX\AcroIEHelper.dll > O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - > {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) > O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - > {4A368E80-174F-4872-96B5-0B27DDD11DB2} - E:\Program > Files\SpywareGuard\dlprotect.dll > O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} > - E:\PROGRA~1\SPYBOT~1\SDHelper.dll > O2 - BHO: Java(tm) Plug-In SSV Helper - > {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program > Files\Java\jre6\bin\ssv.dll > O2 - BHO: Encarta Web Companion Helper Object - > {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - E:\Program Files\Common > Files\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL > O2 - BHO: Java(tm) Plug-In 2 SSV Helper - > {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program > Files\Java\jre6\bin\jp2ssv.dll > O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - > E:\Program Files\Google\Google Gears\Internet Explorer\0.5.21.0\gears.dll > O2 - BHO: FlashFXP Helper for Internet Explorer - > {E5A1691B-D188-4419-AD02-90002030B8EE} - E:\PROGRA~1\FlashFXP\IEFlash.dll > O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - > E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll > O3 - Toolbar: Encarta Web Companion - {147D6308-0614-4112-89B1-31402F9B82C4} > - E:\Program Files\Common Files\Microsoft Shared\Encarta Web > Companion\ENCWCBAR.DLL > O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone > Labs\ZoneAlarm\zlclient.exe > O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE > O4 - HKLM\..\Run: [SmartDefrag] "E:\Program Files\IObit\IObit > SmartDefrag\IObit SmartDefrag.exe" /StartUp > O4 - HKLM\..\Run: [pdfFactory Pro Dispatcher v2] > "E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis 2a.exe" /source=HKLM > O4 - HKLM\..\Run: [nwiz] nwiz.exe /install > O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE > E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit > O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE > E:\WINDOWS\system32\NvCpl.dll,NvStartup > O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton > Ghost\Agent\GhostTray.exe > O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k > O4 - HKLM\..\Run: [itype] "E:\Program Files\Microsoft IntelliType > Pro\itype.exe" > O4 - HKLM\..\Run: [EPSON Stylus Photo R200 Series] > E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H 2.EXE /P30 "EPSON Stylus > Photo R200 Series" /O6 "USB001" /M "Stylus Photo R200" > O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec > Shared\ccApp.exe > O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe > bthprops.cpl,,BluetoothAuthenticationAgent > O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir Desktop\avgnt.exe" > /min > O4 - HKLM\..\Run: [ArcSoft Connection Service] E:\Program Files\Common > Files\ArcSoft\Connection Service\Bin\ACDaemon.exe > O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & > Destroy\TeaTimer.exe > O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User > 'LOCAL SERVICE') > O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User > 'NETWORK SERVICE') > O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User > 'SYSTEM') > O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User > 'Default user') > O4 - Startup: SpywareGuard.lnk = ? > O4 - Global Startup: Device Detector 3.lnk = ? > O8 - Extra context menu item: &ieSpell Options - res://E:\Program > Files\ieSpell\iespell.dll/SPELLOPTION.HTM > O8 - Extra context menu item: &Lookup Meaning - res://E:\Program > Files\ieSpell\iespell.dll/LOOKUPMEANING.HTM > O8 - Extra context menu item: Check &Spelling - res://E:\Program > Files\ieSpell\iespell.dll/SPELLCHECK.HTM > O8 - Extra context menu item: E&xport to Microsoft Excel - > res://E:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 > O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - > E:\Program Files\Google\Google Gears\Internet Explorer\0.5.21.0\gears.dll > O9 - Extra 'Tools' menuitem: &Gears Settings - > {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - E:\Program Files\Google\Google > Gears\Internet Explorer\0.5.21.0\gears.dll > O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - > E:\Program Files\ieSpell\iespell.dll > O9 - Extra 'Tools' menuitem: ieSpell - > {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - E:\Program Files\ieSpell\iespell.dll > O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - > E:\Program Files\ieSpell\iespell.dll > O9 - Extra 'Tools' menuitem: ieSpell Options - > {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - E:\Program Files\ieSpell\iespell.dll > O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - > E:\Program Files\WinHTTrack\WinHTTrackIEBar.dll > O9 - Extra 'Tools' menuitem: Launch WinHTTrack - > {36ECAF82-3300-8F84-092E-AFF36D6C7040} - E:\Program > Files\WinHTTrack\WinHTTrackIEBar.dll > O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - > E:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL > O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - > E:\PROGRA~1\SPYBOT~1\SDHelper.dll > O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - > {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll > O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - > E:\WINDOWS\Network Diagnostic\xpnetdiag.exe > O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - > {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network > Diagnostic\xpnetdiag.exe > O10 - Unknown file in Winsock LSP: e:\windows\system32\mswsock32.dll > O14 - IERESET.INF: START_PAGE_URL=http://www.orange.co.uk > O16 - DPF: Garmin Communicator Plug-In - > https://my.garmin.com/static/m/cab/2...nAxControl.CAB > O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 > Control) - > http://upload.facebook.com/controls/...oUploader5.cab > O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) > - > http://www.nvidia.com/content/Driver...sysreqlab3.cab > O16 - DPF: {26522409-8BBF-4C5B-A4D3-CF4B1D6F255B} - > http://www.umediaserver.net/bin/UMediaControl5.cab > O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - > O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} - > O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} - > O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - > O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - > O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} - > http://www.nvidia.com/content/Driver...aSmartScan.cab > O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} - > http://www.crucial.com/controls/cpcScanner.cab > O16 - DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} (Java Plug-in 1.5.0_04) - > O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} (Java Plug-in 1.5.0_06) - > O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} - > O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - > O17 - > HKLM\System\CCS\Services\Tcpip\..\{A8F5FCA6-48BB-4538-8EE1-4BF55A385B87}: > NameServer = 192.168.90.1 > O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - > E:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL > O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - E:\Program > Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe > O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira > GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe > O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - > E:\Program Files\Avira\AntiVir Desktop\avguard.exe > O23 - Service: Basics Service - Unknown owner - E:\Program > Files\Seagate\Basics\Service\SyncServicesBasics.ex e (file missing) > O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - > E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec > Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe > O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - > E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe > O23 - Service: GEARSecurity - GEAR Software - E:\WINDOWS\System32\GEARSec.exe > O23 - Service: Google Update Service (gupdate1c92e10b050f0be) > (gupdate1c92e10b050f0be) - Google Inc. - E:\Program > Files\Google\Update\GoogleUpdate.exe > O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision > Corporation - E:\Program Files\Common Files\InstallShield\Driver\11\Intel > 32\IDriverT.exe > O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner > - E:\Program Files\iolo\common\lib\ioloServiceManager.exe > O23 - Service: iolo System Service (ioloSystemService) - Unknown owner - > E:\Program Files\iolo\common\lib\ioloServiceManager.exe > O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun > Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe > O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - E:\Program > Files\Lavasoft\Ad-Aware\AAWService.exe > O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - E:\Program > Files\Nero\Nero8\Nero BackItUp\NBService.exe > O23 - Service: Norton Ghost - Symantec Corporation - E:\Program Files\Norton > Ghost\Agent\VProSvc.exe > O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - > E:\WINDOWS\system32\nvsvc32.exe > O23 - Service: PGPsdkService (PGPsdkServ) - PGP Corporation - > E:\WINDOWS\system32\PGPsdkServ.exe > O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - > E:\WINDOWS\system32\IoctlSvc.exe > O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner > - E:\Program Files\CyberLink\Shared Files\RichVideo.exe > O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - > CACE Technologies - E:\Program Files\WinPcap\rpcapd.exe > O23 - Service: ServiceLayer - Nokia. - E:\Program Files\PC Connectivity > Solution\ServiceLayer.exe > O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program > Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - > E:\WINDOWS\system32\ZoneLabs\vsmon.exe > > -- > End of file - 13356 bytes > > > |
|
06-14-2009, 06:30 AM
| |||
| |||
| RE: Lost log in cookies Update. User log on cookies will not stand. Have scanned system in safe mode and no infections found. Using msconfig stopped all services and start ups other than MS ones. Problem continued. The browser (IE7) will store the cookie initially, it can be seen in the 'files' tab and if double clicked you can read the information in the cookie. If you shut down IE and go back in the cookie seems ok and you are still logged in. However, do it a second time and the cookie does not work. If you check the 'file' tab the cookie still shows but when you double click on it you get file/path not found error IE is set to medium. "Mike" wrote: > HI, I was using IE 6 but was told to go to IE 7 to solve this problem but it > has not. > Towards the end of last week after a load of MS updates I suddenly found > that I had to enter my log in details for all my sites like Yahoo, ebay and > many forums. > Everytime I shut down IE I seemed to lose my log in cookies. > > Using IE7 I have checked to always allow session cookies, set the security > to medium. > Cleared out all the caches, re built the cookies. > Made sure CC cleaner does not remove them. > > But nothing works, cookies won't stand. > They seem to be stored but when you click on them you get the error that > they are not found! > > This is a real big pain. > > Here is a Hijack log in case anything there may help. > Please help this is driving me mad LOL > > Logfile of Trend Micro HijackThis v2.0.2 > Scan saved at 23:45:43, on 13/06/2009 > Platform: Windows XP SP3 (WinNT 5.01.2600) > MSIE: Internet Explorer v7.00 (7.00.6000.16850) > Boot mode: Normal > > Running processes: > E:\WINDOWS\System32\smss.exe > E:\WINDOWS\system32\winlogon.exe > E:\WINDOWS\system32\services.exe > E:\WINDOWS\system32\lsass.exe > E:\WINDOWS\system32\svchost.exe > E:\WINDOWS\System32\svchost.exe > E:\WINDOWS\system32\svchost.exe > E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe > E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > E:\Program Files\Lavasoft\Ad-Aware\AAWService.exe > E:\WINDOWS\system32\spoolsv.exe > E:\Program Files\Avira\AntiVir Desktop\sched.exe > E:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe > E:\Program Files\Avira\AntiVir Desktop\avguard.exe > E:\WINDOWS\System32\GEARSec.exe > E:\Program Files\iolo\common\lib\ioloServiceManager.exe > E:\Program Files\Google\Update\GoogleUpdate.exe > E:\Program Files\Java\jre6\bin\jqs.exe > E:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE > E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe > E:\Program Files\Norton Ghost\Agent\VProSvc.exe > E:\WINDOWS\system32\nvsvc32.exe > E:\WINDOWS\system32\PGPsdkServ.exe > E:\WINDOWS\system32\IoctlSvc.exe > E:\Program Files\CyberLink\Shared Files\RichVideo.exe > E:\WINDOWS\system32\tcpsvcs.exe > E:\WINDOWS\System32\snmp.exe > E:\WINDOWS\system32\svchost.exe > E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > E:\WINDOWS\system32\ZoneLabs\vsmon.exe > E:\WINDOWS\Explorer.EXE > E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe > E:\WINDOWS\System32\svchost.exe > E:\WINDOWS\SOUNDMAN.EXE > E:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe > E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2 a.exe > E:\WINDOWS\system32\RUNDLL32.EXE > E:\Program Files\Norton Ghost\Agent\GhostTray.exe > E:\Program Files\Microsoft IntelliType Pro\itype.exe > E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H 2.EXE > E:\Program Files\Common Files\Symantec Shared\ccApp.exe > E:\WINDOWS\system32\rundll32.exe > E:\Program Files\Avira\AntiVir Desktop\avgnt.exe > E:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe > E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe > E:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe > E:\Program Files\Olympus\DeviceDetector\DevDtct2.exe > E:\Program Files\SpywareGuard\sgmain.exe > E:\Program Files\SpywareGuard\sgbhp.exe > E:\Program Files\PC Connectivity Solution\ServiceLayer.exe > E:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe > E:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe > E:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe > E:\Program Files\Internet Explorer\iexplore.exe > E:\Program Files\Trend Micro\HijackThis\HijackThis.exe > > R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = > http://go.microsoft.com/fwlink/?LinkId=69157 > R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} > - (no file) > O2 - BHO: Adobe PDF Reader Link Helper - > {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat > 7.0\ActiveX\AcroIEHelper.dll > O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - > {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) > O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - > {4A368E80-174F-4872-96B5-0B27DDD11DB2} - E:\Program > Files\SpywareGuard\dlprotect.dll > O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} > - E:\PROGRA~1\SPYBOT~1\SDHelper.dll > O2 - BHO: Java(tm) Plug-In SSV Helper - > {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program > Files\Java\jre6\bin\ssv.dll > O2 - BHO: Encarta Web Companion Helper Object - > {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - E:\Program Files\Common > Files\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL > O2 - BHO: Java(tm) Plug-In 2 SSV Helper - > {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program > Files\Java\jre6\bin\jp2ssv.dll > O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - > E:\Program Files\Google\Google Gears\Internet Explorer\0.5.21.0\gears.dll > O2 - BHO: FlashFXP Helper for Internet Explorer - > {E5A1691B-D188-4419-AD02-90002030B8EE} - E:\PROGRA~1\FlashFXP\IEFlash.dll > O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - > E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll > O3 - Toolbar: Encarta Web Companion - {147D6308-0614-4112-89B1-31402F9B82C4} > - E:\Program Files\Common Files\Microsoft Shared\Encarta Web > Companion\ENCWCBAR.DLL > O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone > Labs\ZoneAlarm\zlclient.exe > O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE > O4 - HKLM\..\Run: [SmartDefrag] "E:\Program Files\IObit\IObit > SmartDefrag\IObit SmartDefrag.exe" /StartUp > O4 - HKLM\..\Run: [pdfFactory Pro Dispatcher v2] > "E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis 2a.exe" /source=HKLM > O4 - HKLM\..\Run: [nwiz] nwiz.exe /install > O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE > E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit > O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE > E:\WINDOWS\system32\NvCpl.dll,NvStartup > O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton > Ghost\Agent\GhostTray.exe > O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k > O4 - HKLM\..\Run: [itype] "E:\Program Files\Microsoft IntelliType > Pro\itype.exe" > O4 - HKLM\..\Run: [EPSON Stylus Photo R200 Series] > E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H 2.EXE /P30 "EPSON Stylus > Photo R200 Series" /O6 "USB001" /M "Stylus Photo R200" > O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec > Shared\ccApp.exe > O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe > bthprops.cpl,,BluetoothAuthenticationAgent > O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir Desktop\avgnt.exe" > /min > O4 - HKLM\..\Run: [ArcSoft Connection Service] E:\Program Files\Common > Files\ArcSoft\Connection Service\Bin\ACDaemon.exe > O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & > Destroy\TeaTimer.exe > O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User > 'LOCAL SERVICE') > O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User > 'NETWORK SERVICE') > O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User > 'SYSTEM') > O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User > 'Default user') > O4 - Startup: SpywareGuard.lnk = ? > O4 - Global Startup: Device Detector 3.lnk = ? > O8 - Extra context menu item: &ieSpell Options - res://E:\Program > Files\ieSpell\iespell.dll/SPELLOPTION.HTM > O8 - Extra context menu item: &Lookup Meaning - res://E:\Program > Files\ieSpell\iespell.dll/LOOKUPMEANING.HTM > O8 - Extra context menu item: Check &Spelling - res://E:\Program > Files\ieSpell\iespell.dll/SPELLCHECK.HTM > O8 - Extra context menu item: E&xport to Microsoft Excel - > res://E:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 > O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - > E:\Program Files\Google\Google Gears\Internet Explorer\0.5.21.0\gears.dll > O9 - Extra 'Tools' menuitem: &Gears Settings - > {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - E:\Program Files\Google\Google > Gears\Internet Explorer\0.5.21.0\gears.dll > O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - > E:\Program Files\ieSpell\iespell.dll > O9 - Extra 'Tools' menuitem: ieSpell - > {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - E:\Program Files\ieSpell\iespell.dll > O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - > E:\Program Files\ieSpell\iespell.dll > O9 - Extra 'Tools' menuitem: ieSpell Options - > {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - E:\Program Files\ieSpell\iespell.dll > O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - > E:\Program Files\WinHTTrack\WinHTTrackIEBar.dll > O9 - Extra 'Tools' menuitem: Launch WinHTTrack - > {36ECAF82-3300-8F84-092E-AFF36D6C7040} - E:\Program > Files\WinHTTrack\WinHTTrackIEBar.dll > O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - > E:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL > O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - > E:\PROGRA~1\SPYBOT~1\SDHelper.dll > O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - > {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll > O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - > E:\WINDOWS\Network Diagnostic\xpnetdiag.exe > O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - > {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network > Diagnostic\xpnetdiag.exe > O10 - Unknown file in Winsock LSP: e:\windows\system32\mswsock32.dll > O14 - IERESET.INF: START_PAGE_URL=http://www.orange.co.uk > O16 - DPF: Garmin Communicator Plug-In - > https://my.garmin.com/static/m/cab/2...nAxControl.CAB > O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 > Control) - > http://upload.facebook.com/controls/...oUploader5.cab > O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) > - > http://www.nvidia.com/content/Driver...sysreqlab3.cab > O16 - DPF: {26522409-8BBF-4C5B-A4D3-CF4B1D6F255B} - > http://www.umediaserver.net/bin/UMediaControl5.cab > O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - > O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} - > O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} - > O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - > O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - > O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} - > http://www.nvidia.com/content/Driver...aSmartScan.cab > O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} - > http://www.crucial.com/controls/cpcScanner.cab > O16 - DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} (Java Plug-in 1.5.0_04) - > O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} (Java Plug-in 1.5.0_06) - > O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} - > O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - > O17 - > HKLM\System\CCS\Services\Tcpip\..\{A8F5FCA6-48BB-4538-8EE1-4BF55A385B87}: > NameServer = 192.168.90.1 > O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - > E:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL > O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - E:\Program > Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe > O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira > GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe > O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - > E:\Program Files\Avira\AntiVir Desktop\avguard.exe > O23 - Service: Basics Service - Unknown owner - E:\Program > Files\Seagate\Basics\Service\SyncServicesBasics.ex e (file missing) > O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - > E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec > Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe > O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - > E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe > O23 - Service: GEARSecurity - GEAR Software - E:\WINDOWS\System32\GEARSec.exe > O23 - Service: Google Update Service (gupdate1c92e10b050f0be) > (gupdate1c92e10b050f0be) - Google Inc. - E:\Program > Files\Google\Update\GoogleUpdate.exe > O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision > Corporation - E:\Program Files\Common Files\InstallShield\Driver\11\Intel > 32\IDriverT.exe > O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner > - E:\Program Files\iolo\common\lib\ioloServiceManager.exe > O23 - Service: iolo System Service (ioloSystemService) - Unknown owner - > E:\Program Files\iolo\common\lib\ioloServiceManager.exe > O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun > Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe > O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - E:\Program > Files\Lavasoft\Ad-Aware\AAWService.exe > O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - E:\Program > Files\Nero\Nero8\Nero BackItUp\NBService.exe > O23 - Service: Norton Ghost - Symantec Corporation - E:\Program Files\Norton > Ghost\Agent\VProSvc.exe > O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - > E:\WINDOWS\system32\nvsvc32.exe > O23 - Service: PGPsdkService (PGPsdkServ) - PGP Corporation - > E:\WINDOWS\system32\PGPsdkServ.exe > O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - > E:\WINDOWS\system32\IoctlSvc.exe > O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner > - E:\Program Files\CyberLink\Shared Files\RichVideo.exe > O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - > CACE Technologies - E:\Program Files\WinPcap\rpcapd.exe > O23 - Service: ServiceLayer - Nokia. - E:\Program Files\PC Connectivity > Solution\ServiceLayer.exe > O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program > Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - > E:\WINDOWS\system32\ZoneLabs\vsmon.exe > > -- > End of file - 13356 bytes > > > |
|
06-14-2009, 11:20 AM
| |||
| |||
| RE: Lost log in cookies Bit more of an update. I found Windows live safety scanner installed despite my not having done so! Removed it thinking it was the reason for this but alas no. Also, installed Firefox but it has the exact same problem. The cookie will stand once but X out of IE twice and its gone. I just have no idea what is doing this? Suspect updates maybe? KB969897 KB938127-v2 (no info found) KB968537 KB969898 KB970238 KB961501 Be nice to get some help on this I see I am not alone "Mike" wrote: > Update. > > User log on cookies will not stand. > > Have scanned system in safe mode and no infections found. > > Using msconfig stopped all services and start ups other than MS ones. > > Problem continued. > > The browser (IE7) will store the cookie initially, it can be seen in the > 'files' tab and if double clicked > you can read the information in the cookie. > > If you shut down IE and go back in the cookie seems ok and you are still > logged in. > > However, do it a second time and the cookie does not work. > If you check the 'file' tab the cookie still shows but when you double click > on it > you get file/path not found error > > IE is set to medium. > > "Mike" wrote: > > > HI, I was using IE 6 but was told to go to IE 7 to solve this problem but it > > has not. > > Towards the end of last week after a load of MS updates I suddenly found > > that I had to enter my log in details for all my sites like Yahoo, ebay and > > many forums. > > Everytime I shut down IE I seemed to lose my log in cookies. > > > > Using IE7 I have checked to always allow session cookies, set the security > > to medium. > > Cleared out all the caches, re built the cookies. > > Made sure CC cleaner does not remove them. > > > > But nothing works, cookies won't stand. > > They seem to be stored but when you click on them you get the error that > > they are not found! > > > > This is a real big pain. > > > > Here is a Hijack log in case anything there may help. > > Please help this is driving me mad LOL > > > > Logfile of Trend Micro HijackThis v2.0.2 > > Scan saved at 23:45:43, on 13/06/2009 > > Platform: Windows XP SP3 (WinNT 5.01.2600) > > MSIE: Internet Explorer v7.00 (7.00.6000.16850) > > Boot mode: Normal > > > > Running processes: > > E:\WINDOWS\System32\smss.exe > > E:\WINDOWS\system32\winlogon.exe > > E:\WINDOWS\system32\services.exe > > E:\WINDOWS\system32\lsass.exe > > E:\WINDOWS\system32\svchost.exe > > E:\WINDOWS\System32\svchost.exe > > E:\WINDOWS\system32\svchost.exe > > E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe > > E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > > E:\Program Files\Lavasoft\Ad-Aware\AAWService.exe > > E:\WINDOWS\system32\spoolsv.exe > > E:\Program Files\Avira\AntiVir Desktop\sched.exe > > E:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe > > E:\Program Files\Avira\AntiVir Desktop\avguard.exe > > E:\WINDOWS\System32\GEARSec.exe > > E:\Program Files\iolo\common\lib\ioloServiceManager.exe > > E:\Program Files\Google\Update\GoogleUpdate.exe > > E:\Program Files\Java\jre6\bin\jqs.exe > > E:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE > > E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe > > E:\Program Files\Norton Ghost\Agent\VProSvc.exe > > E:\WINDOWS\system32\nvsvc32.exe > > E:\WINDOWS\system32\PGPsdkServ.exe > > E:\WINDOWS\system32\IoctlSvc.exe > > E:\Program Files\CyberLink\Shared Files\RichVideo.exe > > E:\WINDOWS\system32\tcpsvcs.exe > > E:\WINDOWS\System32\snmp.exe > > E:\WINDOWS\system32\svchost.exe > > E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > > E:\WINDOWS\system32\ZoneLabs\vsmon.exe > > E:\WINDOWS\Explorer.EXE > > E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe > > E:\WINDOWS\System32\svchost.exe > > E:\WINDOWS\SOUNDMAN.EXE > > E:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe > > E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2 a.exe > > E:\WINDOWS\system32\RUNDLL32.EXE > > E:\Program Files\Norton Ghost\Agent\GhostTray.exe > > E:\Program Files\Microsoft IntelliType Pro\itype.exe > > E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H 2.EXE > > E:\Program Files\Common Files\Symantec Shared\ccApp.exe > > E:\WINDOWS\system32\rundll32.exe > > E:\Program Files\Avira\AntiVir Desktop\avgnt.exe > > E:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe > > E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe > > E:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe > > E:\Program Files\Olympus\DeviceDetector\DevDtct2.exe > > E:\Program Files\SpywareGuard\sgmain.exe > > E:\Program Files\SpywareGuard\sgbhp.exe > > E:\Program Files\PC Connectivity Solution\ServiceLayer.exe > > E:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe > > E:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe > > E:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe > > E:\Program Files\Internet Explorer\iexplore.exe > > E:\Program Files\Trend Micro\HijackThis\HijackThis.exe > > > > R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank > > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = > > http://go.microsoft.com/fwlink/?LinkId=69157 > > R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} > > - (no file) > > O2 - BHO: Adobe PDF Reader Link Helper - > > {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat > > 7.0\ActiveX\AcroIEHelper.dll > > O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - > > {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) > > O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - > > {4A368E80-174F-4872-96B5-0B27DDD11DB2} - E:\Program > > Files\SpywareGuard\dlprotect.dll > > O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} > > - E:\PROGRA~1\SPYBOT~1\SDHelper.dll > > O2 - BHO: Java(tm) Plug-In SSV Helper - > > {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program > > Files\Java\jre6\bin\ssv.dll > > O2 - BHO: Encarta Web Companion Helper Object - > > {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - E:\Program Files\Common > > Files\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL > > O2 - BHO: Java(tm) Plug-In 2 SSV Helper - > > {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program > > Files\Java\jre6\bin\jp2ssv.dll > > O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - > > E:\Program Files\Google\Google Gears\Internet Explorer\0.5.21.0\gears.dll > > O2 - BHO: FlashFXP Helper for Internet Explorer - > > {E5A1691B-D188-4419-AD02-90002030B8EE} - E:\PROGRA~1\FlashFXP\IEFlash.dll > > O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - > > E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll > > O3 - Toolbar: Encarta Web Companion - {147D6308-0614-4112-89B1-31402F9B82C4} > > - E:\Program Files\Common Files\Microsoft Shared\Encarta Web > > Companion\ENCWCBAR.DLL > > O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone > > Labs\ZoneAlarm\zlclient.exe > > O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE > > O4 - HKLM\..\Run: [SmartDefrag] "E:\Program Files\IObit\IObit > > SmartDefrag\IObit SmartDefrag.exe" /StartUp > > O4 - HKLM\..\Run: [pdfFactory Pro Dispatcher v2] > > "E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis 2a.exe" /source=HKLM > > O4 - HKLM\..\Run: [nwiz] nwiz.exe /install > > O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE > > E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit > > O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE > > E:\WINDOWS\system32\NvCpl.dll,NvStartup > > O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton > > Ghost\Agent\GhostTray.exe > > O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k > > O4 - HKLM\..\Run: [itype] "E:\Program Files\Microsoft IntelliType > > Pro\itype.exe" > > O4 - HKLM\..\Run: [EPSON Stylus Photo R200 Series] > > E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H 2.EXE /P30 "EPSON Stylus > > Photo R200 Series" /O6 "USB001" /M "Stylus Photo R200" > > O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec > > Shared\ccApp.exe > > O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe > > bthprops.cpl,,BluetoothAuthenticationAgent > > O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir Desktop\avgnt.exe" > > /min > > O4 - HKLM\..\Run: [ArcSoft Connection Service] E:\Program Files\Common > > Files\ArcSoft\Connection Service\Bin\ACDaemon.exe > > O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & > > Destroy\TeaTimer.exe > > O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User > > 'LOCAL SERVICE') > > O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User > > 'NETWORK SERVICE') > > O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User > > 'SYSTEM') > > O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User > > 'Default user') > > O4 - Startup: SpywareGuard.lnk = ? > > O4 - Global Startup: Device Detector 3.lnk = ? > > O8 - Extra context menu item: &ieSpell Options - res://E:\Program > > Files\ieSpell\iespell.dll/SPELLOPTION.HTM > > O8 - Extra context menu item: &Lookup Meaning - res://E:\Program > > Files\ieSpell\iespell.dll/LOOKUPMEANING.HTM > > O8 - Extra context menu item: Check &Spelling - res://E:\Program > > Files\ieSpell\iespell.dll/SPELLCHECK.HTM > > O8 - Extra context menu item: E&xport to Microsoft Excel - > > res://E:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 > > O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - > > E:\Program Files\Google\Google Gears\Internet Explorer\0.5.21.0\gears.dll > > O9 - Extra 'Tools' menuitem: &Gears Settings - > > {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - E:\Program Files\Google\Google > > Gears\Internet Explorer\0.5.21.0\gears.dll > > O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - > > E:\Program Files\ieSpell\iespell.dll > > O9 - Extra 'Tools' menuitem: ieSpell - > > {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - E:\Program Files\ieSpell\iespell.dll > > O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - > > E:\Program Files\ieSpell\iespell.dll > > O9 - Extra 'Tools' menuitem: ieSpell Options - > > {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - E:\Program Files\ieSpell\iespell.dll > > O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - > > E:\Program Files\WinHTTrack\WinHTTrackIEBar.dll > > O9 - Extra 'Tools' menuitem: Launch WinHTTrack - > > {36ECAF82-3300-8F84-092E-AFF36D6C7040} - E:\Program > > Files\WinHTTrack\WinHTTrackIEBar.dll > > O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - > > E:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL > > O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - > > E:\PROGRA~1\SPYBOT~1\SDHelper.dll > > O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - > > {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll > > O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - > > E:\WINDOWS\Network Diagnostic\xpnetdiag.exe > > O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - > > {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network > > Diagnostic\xpnetdiag.exe > > O10 - Unknown file in Winsock LSP: e:\windows\system32\mswsock32.dll > > O14 - IERESET.INF: START_PAGE_URL=http://www.orange.co.uk > > O16 - DPF: Garmin Communicator Plug-In - > > https://my.garmin.com/static/m/cab/2...nAxControl.CAB > > O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 > > Control) - > > http://upload.facebook.com/controls/...oUploader5.cab > > O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) > > - > > http://www.nvidia.com/content/Driver...sysreqlab3.cab > > O16 - DPF: {26522409-8BBF-4C5B-A4D3-CF4B1D6F255B} - > > http://www.umediaserver.net/bin/UMediaControl5.cab > > O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - > > O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} - > > O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} - > > O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - > > O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - > > O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} - > > http://www.nvidia.com/content/Driver...aSmartScan.cab > > O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} - > > http://www.crucial.com/controls/cpcScanner.cab > > O16 - DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} (Java Plug-in 1.5.0_04) - > > O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} (Java Plug-in 1.5.0_06) - > > O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} - > > O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - > > O17 - > > HKLM\System\CCS\Services\Tcpip\..\{A8F5FCA6-48BB-4538-8EE1-4BF55A385B87}: > > NameServer = 192.168.90.1 > > O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - > > E:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL > > O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - E:\Program > > Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe > > O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira > > GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe > > O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - > > E:\Program Files\Avira\AntiVir Desktop\avguard.exe > > O23 - Service: Basics Service - Unknown owner - E:\Program > > Files\Seagate\Basics\Service\SyncServicesBasics.ex e (file missing) > > O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - > > E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > > O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec > > Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe > > O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - > > E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe > > O23 - Service: GEARSecurity - GEAR Software - E:\WINDOWS\System32\GEARSec.exe > > O23 - Service: Google Update Service (gupdate1c92e10b050f0be) > > (gupdate1c92e10b050f0be) - Google Inc. - E:\Program > > Files\Google\Update\GoogleUpdate.exe > > O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision > > Corporation - E:\Program Files\Common Files\InstallShield\Driver\11\Intel > > 32\IDriverT.exe > > O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner > > - E:\Program Files\iolo\common\lib\ioloServiceManager.exe > > O23 - Service: iolo System Service (ioloSystemService) - Unknown owner - > > E:\Program Files\iolo\common\lib\ioloServiceManager.exe > > O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun > > Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe > > O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - E:\Program > > Files\Lavasoft\Ad-Aware\AAWService.exe > > O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - E:\Program > > Files\Nero\Nero8\Nero BackItUp\NBService.exe > > O23 - Service: Norton Ghost - Symantec Corporation - E:\Program Files\Norton > > Ghost\Agent\VProSvc.exe > > O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - > > E:\WINDOWS\system32\nvsvc32.exe > > O23 - Service: PGPsdkService (PGPsdkServ) - PGP Corporation - > > E:\WINDOWS\system32\PGPsdkServ.exe > > O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - > > E:\WINDOWS\system32\IoctlSvc.exe > > O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner > > - E:\Program Files\CyberLink\Shared Files\RichVideo.exe > > O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - > > CACE Technologies - E:\Program Files\WinPcap\rpcapd.exe > > O23 - Service: ServiceLayer - Nokia. - E:\Program Files\PC Connectivity > > Solution\ServiceLayer.exe > > O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program > > Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > > O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - > > E:\WINDOWS\system32\ZoneLabs\vsmon.exe > > |
|
06-14-2009, 12:10 PM
| |||
| |||
| Re: Lost log in cookies >>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem >>> but... Who told you that, Mike? Did you only recently install Avira AntiVir and had you been running without any anti-virus protection until then? Your HijackThis log suggestes that you used to have a Norton application installed which included Norton Ghost and Norton AntiVirus (e.g., Norton System Works) and that you attempted to remove NAV, leaving Ghost in place. Unfortunately, some NAV leftovers remain on your computer and these may be the culprit here. Since you have Nero BackItUp installed, do you still need Ghost? How long has Spybot been installed and Tea Timer enabled? Do you understand what Tea Timer does and how it does it? When did you install IE7, before or after you installed the June 2009 updates? IE Tools | Internet Options | Content | AutoComplete | Settings | Use AutoComplete for: What options, if any, are checked/enabled here? IE Tools | Internet Options | Privacy | Sites: Are the sites giving you problems (e.g., Yahoo, eBay) listed in Managed Sites box with the "Always Allow" annotation? If you disable ZA and then enable the Windows Firewall, does the unwanted behavior persist? -- ~Robear Dyer (PA Bear) MS MVP-IE, Mail, Security, Windows Client - since 2002 Mike wrote: > Bit more of an update. > > I found Windows live safety scanner installed despite my not having done > so! > Removed it thinking it was the reason for this but alas no. > Also, installed Firefox but it has the exact same problem. > The cookie will stand once but X out of IE twice and its gone. > I just have no idea what is doing this? > > Suspect updates maybe? > > KB969897 > > KB938127-v2 (no info found) > > KB968537 > KB969898 > KB970238 > KB961501 > > Be nice to get some help on this I see I am not alone > > "Mike" wrote: >> Update. >> >> User log on cookies will not stand. >> >> Have scanned system in safe mode and no infections found. >> >> Using msconfig stopped all services and start ups other than MS ones. >> >> Problem continued. >> >> The browser (IE7) will store the cookie initially, it can be seen in the >> 'files' tab and if double clicked >> you can read the information in the cookie. >> >> If you shut down IE and go back in the cookie seems ok and you are still >> logged in. >> >> However, do it a second time and the cookie does not work. >> If you check the 'file' tab the cookie still shows but when you double >> click on it >> you get file/path not found error >> >> IE is set to medium. >> >> "Mike" wrote: >>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem >>> but >>> it has not. >>> Towards the end of last week after a load of MS updates I suddenly found >>> that I had to enter my log in details for all my sites like Yahoo, ebay >>> and many forums. >>> Everytime I shut down IE I seemed to lose my log in cookies. >>> >>> Using IE7 I have checked to always allow session cookies, set the >>> security >>> to medium. >>> Cleared out all the caches, re built the cookies. >>> Made sure CC cleaner does not remove them. >>> >>> But nothing works, cookies won't stand. >>> They seem to be stored but when you click on them you get the error that >>> they are not found! >>> >>> This is a real big pain. >>> >>> Here is a Hijack log in case anything there may help. >>> Please help this is driving me mad LOL >>> >>> Logfile of Trend Micro HijackThis v2.0.2 >>> Scan saved at 23:45:43, on 13/06/2009 >>> Platform: Windows XP SP3 (WinNT 5.01.2600) >>> MSIE: Internet Explorer v7.00 (7.00.6000.16850) >>> Boot mode: Normal >>> >>> Running processes: <SNIP> >>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe >>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe <SNIP> >>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe <SNIP> >>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe >>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe <SNIP> >>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe >>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe >>> E:\WINDOWS\Explorer.EXE >>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe <SNIP> >>> E:\WINDOWS\system32\RUNDLL32.EXE >>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe <SNIP> >>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe <SNIP> >>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe <SNIP> >>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - >>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) <SNIP> >>> O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - >>> E:\Program Files\Google\Google Gears\Internet >>> Explorer\0.5.21.0\gears.dll <SNIP> >>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone >>> Labs\ZoneAlarm\zlclient.exe <SNIP> >>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton >>> Ghost\Agent\GhostTray.exe <SNIP> >>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec >>> Shared\ccApp.exe <SNIP> >>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir >>> Desktop\avgnt.exe" /min <SNIP> >>> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & >>> Destroy\TeaTimer.exe <SNIP> >>> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira >>> GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe >>> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - >>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe <SNIP> >>> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec >>> Corporation - >>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe >>> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec >>> Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe >>> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec >>> Corporation - E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe <SNIP> >>> O23 - Service: Norton Ghost - Symantec Corporation - E:\Program >>> Files\Norton Ghost\Agent\VProSvc.exe <SNIP> >>> O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program >>> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe >>> O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - >>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe |
|
06-14-2009, 12:40 PM
| |||
| |||
| Re: Lost log in cookies Hi Was on PC Q&A said IE6 was the problem. Its OK I quite like IE7 OK re Norton, no Ghost is my main back up and this is why you see the Norton stuff. I don't use the Nero thing at all. Been running Avira for some time now, AVG prior to that. The problem occured when I was usinging IE6. I installed IE7 after the June updates. I have used spybot and its tea timer for many years now. Auto Complete, forms is the only unchecked box. Yes I have put some of the sites into always allow. I'll try the Zone alarm test and report back shortly. Thanks "PA Bear [MS MVP]" wrote: > >>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem > >>> but... > > Who told you that, Mike? > > Did you only recently install Avira AntiVir and had you been running without > any anti-virus protection until then? > > Your HijackThis log suggestes that you used to have a Norton application > installed which included Norton Ghost and Norton AntiVirus (e.g., Norton > System Works) and that you attempted to remove NAV, leaving Ghost in place. > Unfortunately, some NAV leftovers remain on your computer and these may be > the culprit here. > > Since you have Nero BackItUp installed, do you still need Ghost? > > How long has Spybot been installed and Tea Timer enabled? Do you understand > what Tea Timer does and how it does it? > > When did you install IE7, before or after you installed the June 2009 > updates? > > IE Tools | Internet Options | Content | AutoComplete | Settings | Use > AutoComplete for: What options, if any, are checked/enabled here? > > IE Tools | Internet Options | Privacy | Sites: Are the sites giving you > problems (e.g., Yahoo, eBay) listed in Managed Sites box with the "Always > Allow" annotation? > > If you disable ZA and then enable the Windows Firewall, does the unwanted > behavior persist? > -- > ~Robear Dyer (PA Bear) > MS MVP-IE, Mail, Security, Windows Client - since 2002 > > > Mike wrote: > > Bit more of an update. > > > > I found Windows live safety scanner installed despite my not having done > > so! > > Removed it thinking it was the reason for this but alas no. > > Also, installed Firefox but it has the exact same problem. > > The cookie will stand once but X out of IE twice and its gone. > > I just have no idea what is doing this? > > > > Suspect updates maybe? > > > > KB969897 > > > > KB938127-v2 (no info found) > > > > KB968537 > > KB969898 > > KB970238 > > KB961501 > > > > Be nice to get some help on this I see I am not alone > > > > "Mike" wrote: > >> Update. > >> > >> User log on cookies will not stand. > >> > >> Have scanned system in safe mode and no infections found. > >> > >> Using msconfig stopped all services and start ups other than MS ones. > >> > >> Problem continued. > >> > >> The browser (IE7) will store the cookie initially, it can be seen in the > >> 'files' tab and if double clicked > >> you can read the information in the cookie. > >> > >> If you shut down IE and go back in the cookie seems ok and you are still > >> logged in. > >> > >> However, do it a second time and the cookie does not work. > >> If you check the 'file' tab the cookie still shows but when you double > >> click on it > >> you get file/path not found error > >> > >> IE is set to medium. > >> > >> "Mike" wrote: > >>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem > >>> but > >>> it has not. > >>> Towards the end of last week after a load of MS updates I suddenly found > >>> that I had to enter my log in details for all my sites like Yahoo, ebay > >>> and many forums. > >>> Everytime I shut down IE I seemed to lose my log in cookies. > >>> > >>> Using IE7 I have checked to always allow session cookies, set the > >>> security > >>> to medium. > >>> Cleared out all the caches, re built the cookies. > >>> Made sure CC cleaner does not remove them. > >>> > >>> But nothing works, cookies won't stand. > >>> They seem to be stored but when you click on them you get the error that > >>> they are not found! > >>> > >>> This is a real big pain. > >>> > >>> Here is a Hijack log in case anything there may help. > >>> Please help this is driving me mad LOL > >>> > >>> Logfile of Trend Micro HijackThis v2.0.2 > >>> Scan saved at 23:45:43, on 13/06/2009 > >>> Platform: Windows XP SP3 (WinNT 5.01.2600) > >>> MSIE: Internet Explorer v7.00 (7.00.6000.16850) > >>> Boot mode: Normal > >>> > >>> Running processes: > <SNIP> > >>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe > >>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > <SNIP> > >>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe > <SNIP> > >>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe > >>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe > <SNIP> > >>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > >>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe > >>> E:\WINDOWS\Explorer.EXE > >>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe > <SNIP> > >>> E:\WINDOWS\system32\RUNDLL32.EXE > >>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe > <SNIP> > >>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe > <SNIP> > >>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe > > <SNIP> > >>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - > >>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) > <SNIP> > >>> O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - > >>> E:\Program Files\Google\Google Gears\Internet > >>> Explorer\0.5.21.0\gears.dll > <SNIP> > >>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone > >>> Labs\ZoneAlarm\zlclient.exe > <SNIP> > >>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton > >>> Ghost\Agent\GhostTray.exe > <SNIP> > >>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec > >>> Shared\ccApp.exe > <SNIP> > >>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir > >>> Desktop\avgnt.exe" /min > <SNIP> > >>> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & > >>> Destroy\TeaTimer.exe > <SNIP> > >>> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira > >>> GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe > >>> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - > >>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe > <SNIP> > >>> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec > >>> Corporation - > >>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > >>> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec > >>> Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe > >>> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec > >>> Corporation - E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe > <SNIP> > >>> O23 - Service: Norton Ghost - Symantec Corporation - E:\Program > >>> Files\Norton Ghost\Agent\VProSvc.exe > <SNIP> > >>> O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program > >>> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > >>> O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - > >>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe > > |
|
06-14-2009, 12:40 PM
| |||
| |||
| Re: Lost log in cookies HI I thought you might of solved it there! Disabled Zone Alarm and put Windows fire wall on. However, once I had 'x' out of IE three times all my log in cookies were being ignored. This is a horrible problem for sure. "Mike" wrote: > Hi > > Was on PC Q&A said IE6 was the problem. > Its OK I quite like IE7 > > OK re Norton, no Ghost is my main back up and this is why you see the Norton > stuff. > I don't use the Nero thing at all. > > Been running Avira for some time now, AVG prior to that. > > The problem occured when I was usinging IE6. > I installed IE7 after the June updates. > > I have used spybot and its tea timer for many years now. > > Auto Complete, forms is the only unchecked box. > > Yes I have put some of the sites into always allow. > > I'll try the Zone alarm test and report back shortly. > > Thanks > > > > > "PA Bear [MS MVP]" wrote: > > > >>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem > > >>> but... > > > > Who told you that, Mike? > > > > Did you only recently install Avira AntiVir and had you been running without > > any anti-virus protection until then? > > > > Your HijackThis log suggestes that you used to have a Norton application > > installed which included Norton Ghost and Norton AntiVirus (e.g., Norton > > System Works) and that you attempted to remove NAV, leaving Ghost in place. > > Unfortunately, some NAV leftovers remain on your computer and these may be > > the culprit here. > > > > Since you have Nero BackItUp installed, do you still need Ghost? > > > > How long has Spybot been installed and Tea Timer enabled? Do you understand > > what Tea Timer does and how it does it? > > > > When did you install IE7, before or after you installed the June 2009 > > updates? > > > > IE Tools | Internet Options | Content | AutoComplete | Settings | Use > > AutoComplete for: What options, if any, are checked/enabled here? > > > > IE Tools | Internet Options | Privacy | Sites: Are the sites giving you > > problems (e.g., Yahoo, eBay) listed in Managed Sites box with the "Always > > Allow" annotation? > > > > If you disable ZA and then enable the Windows Firewall, does the unwanted > > behavior persist? > > -- > > ~Robear Dyer (PA Bear) > > MS MVP-IE, Mail, Security, Windows Client - since 2002 > > > > > > Mike wrote: > > > Bit more of an update. > > > > > > I found Windows live safety scanner installed despite my not having done > > > so! > > > Removed it thinking it was the reason for this but alas no. > > > Also, installed Firefox but it has the exact same problem. > > > The cookie will stand once but X out of IE twice and its gone. > > > I just have no idea what is doing this? > > > > > > Suspect updates maybe? > > > > > > KB969897 > > > > > > KB938127-v2 (no info found) > > > > > > KB968537 > > > KB969898 > > > KB970238 > > > KB961501 > > > > > > Be nice to get some help on this I see I am not alone > > > > > > "Mike" wrote: > > >> Update. > > >> > > >> User log on cookies will not stand. > > >> > > >> Have scanned system in safe mode and no infections found. > > >> > > >> Using msconfig stopped all services and start ups other than MS ones. > > >> > > >> Problem continued. > > >> > > >> The browser (IE7) will store the cookie initially, it can be seen in the > > >> 'files' tab and if double clicked > > >> you can read the information in the cookie. > > >> > > >> If you shut down IE and go back in the cookie seems ok and you are still > > >> logged in. > > >> > > >> However, do it a second time and the cookie does not work. > > >> If you check the 'file' tab the cookie still shows but when you double > > >> click on it > > >> you get file/path not found error > > >> > > >> IE is set to medium. > > >> > > >> "Mike" wrote: > > >>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem > > >>> but > > >>> it has not. > > >>> Towards the end of last week after a load of MS updates I suddenly found > > >>> that I had to enter my log in details for all my sites like Yahoo, ebay > > >>> and many forums. > > >>> Everytime I shut down IE I seemed to lose my log in cookies. > > >>> > > >>> Using IE7 I have checked to always allow session cookies, set the > > >>> security > > >>> to medium. > > >>> Cleared out all the caches, re built the cookies. > > >>> Made sure CC cleaner does not remove them. > > >>> > > >>> But nothing works, cookies won't stand. > > >>> They seem to be stored but when you click on them you get the error that > > >>> they are not found! > > >>> > > >>> This is a real big pain. > > >>> > > >>> Here is a Hijack log in case anything there may help. > > >>> Please help this is driving me mad LOL > > >>> > > >>> Logfile of Trend Micro HijackThis v2.0.2 > > >>> Scan saved at 23:45:43, on 13/06/2009 > > >>> Platform: Windows XP SP3 (WinNT 5.01.2600) > > >>> MSIE: Internet Explorer v7.00 (7.00.6000.16850) > > >>> Boot mode: Normal > > >>> > > >>> Running processes: > > <SNIP> > > >>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe > > >>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > > <SNIP> > > >>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe > > <SNIP> > > >>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe > > >>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe > > <SNIP> > > >>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > > >>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe > > >>> E:\WINDOWS\Explorer.EXE > > >>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe > > <SNIP> > > >>> E:\WINDOWS\system32\RUNDLL32.EXE > > >>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe > > <SNIP> > > >>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe > > <SNIP> > > >>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe > > > > <SNIP> > > >>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - > > >>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) > > <SNIP> > > >>> O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - > > >>> E:\Program Files\Google\Google Gears\Internet > > >>> Explorer\0.5.21.0\gears.dll > > <SNIP> > > >>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone > > >>> Labs\ZoneAlarm\zlclient.exe > > <SNIP> > > >>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton > > >>> Ghost\Agent\GhostTray.exe > > <SNIP> > > >>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec > > >>> Shared\ccApp.exe > > <SNIP> > > >>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir > > >>> Desktop\avgnt.exe" /min > > <SNIP> > > >>> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & > > >>> Destroy\TeaTimer.exe > > <SNIP> > > >>> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira > > >>> GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe > > >>> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - > > >>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe > > <SNIP> > > >>> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec > > >>> Corporation - > > >>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > > >>> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec > > >>> Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe > > >>> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec > > >>> Corporation - E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe > > <SNIP> > > >>> O23 - Service: Norton Ghost - Symantec Corporation - E:\Program > > >>> Files\Norton Ghost\Agent\VProSvc.exe > > <SNIP> > > >>> O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program > > >>> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > > >>> O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - > > >>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe > > > > |
|
06-14-2009, 04:10 PM
| |||
| |||
| Re: Lost log in cookies > Was on PC Q&A said IE6 was the problem. I doubt it. > OK re Norton, no Ghost is my main back up and this is why you see the > Norton > stuff. Nevertheless, there are some leftovers from Norton System Works and they may have something to do with your problems. Unfortunately, the only way to get rid of them would also remove Ghost. > I don't use the Nero thing at all. Then why is it still installed & loading at boot? > Been running Avira for some time now, AVG prior to that. The Norton leftovers may have compromised the installs of both Avira and AVG. > The problem occured when I was usinging IE6. > I installed IE7 after the June updates. Then neither IE7 nor the June updates are causing your problems. > I have used spybot and its tea timer for many years now. Again, do you understand what Tea Timer does and how it does it? Did you disable (1) Tea Timer & SDHelper, (2) your anti-virus application, and (3) ZoneAlarm *and then* (4) enable the Windows Firewall before you installed WinXP SP3? > Yes I have put some of the sites into always allow. Does that include yahoo.com, ebay.com, and all of your forums (e.g., pcqanda.com)? Mike wrote: > Was on PC Q&A said IE6 was the problem. > Its OK I quite like IE7 > > OK re Norton, no Ghost is my main back up and this is why you see the > Norton > stuff. > I don't use the Nero thing at all. > > Been running Avira for some time now, AVG prior to that. > > The problem occured when I was usinging IE6. > I installed IE7 after the June updates. > > I have used spybot and its tea timer for many years now. > > Auto Complete, forms is the only unchecked box. > > Yes I have put some of the sites into always allow. > > I'll try the Zone alarm test and report back shortly. > > "PA Bear [MS MVP]" wrote: >>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem >>>>> but... >> >> Who told you that, Mike? >> >> Did you only recently install Avira AntiVir and had you been running >> without any anti-virus protection until then? >> >> Your HijackThis log suggestes that you used to have a Norton application >> installed which included Norton Ghost and Norton AntiVirus (e.g., Norton >> System Works) and that you attempted to remove NAV, leaving Ghost in >> place. >> Unfortunately, some NAV leftovers remain on your computer and these may >> be >> the culprit here. >> >> Since you have Nero BackItUp installed, do you still need Ghost? >> >> How long has Spybot been installed and Tea Timer enabled? Do you >> understand what Tea Timer does and how it does it? >> >> When did you install IE7, before or after you installed the June 2009 >> updates? >> >> IE Tools | Internet Options | Content | AutoComplete | Settings | Use >> AutoComplete for: What options, if any, are checked/enabled here? >> >> IE Tools | Internet Options | Privacy | Sites: Are the sites giving you >> problems (e.g., Yahoo, eBay) listed in Managed Sites box with the "Always >> Allow" annotation? >> >> If you disable ZA and then enable the Windows Firewall, does the unwanted >> behavior persist? >> -- >> ~Robear Dyer (PA Bear) >> MS MVP-IE, Mail, Security, Windows Client - since 2002 >> >> >> Mike wrote: >>> Bit more of an update. >>> >>> I found Windows live safety scanner installed despite my not having done >>> so! >>> Removed it thinking it was the reason for this but alas no. >>> Also, installed Firefox but it has the exact same problem. >>> The cookie will stand once but X out of IE twice and its gone. >>> I just have no idea what is doing this? >>> >>> Suspect updates maybe? >>> >>> KB969897 >>> >>> KB938127-v2 (no info found) >>> >>> KB968537 >>> KB969898 >>> KB970238 >>> KB961501 >>> >>> Be nice to get some help on this I see I am not alone >>> >>> "Mike" wrote: >>>> Update. >>>> >>>> User log on cookies will not stand. >>>> >>>> Have scanned system in safe mode and no infections found. >>>> >>>> Using msconfig stopped all services and start ups other than MS ones. >>>> >>>> Problem continued. >>>> >>>> The browser (IE7) will store the cookie initially, it can be seen in >>>> the >>>> 'files' tab and if double clicked >>>> you can read the information in the cookie. >>>> >>>> If you shut down IE and go back in the cookie seems ok and you are >>>> still >>>> logged in. >>>> >>>> However, do it a second time and the cookie does not work. >>>> If you check the 'file' tab the cookie still shows but when you double >>>> click on it >>>> you get file/path not found error >>>> >>>> IE is set to medium. >>>> >>>> "Mike" wrote: >>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem >>>>> but >>>>> it has not. >>>>> Towards the end of last week after a load of MS updates I suddenly >>>>> found >>>>> that I had to enter my log in details for all my sites like Yahoo, >>>>> ebay >>>>> and many forums. >>>>> Everytime I shut down IE I seemed to lose my log in cookies. >>>>> >>>>> Using IE7 I have checked to always allow session cookies, set the >>>>> security >>>>> to medium. >>>>> Cleared out all the caches, re built the cookies. >>>>> Made sure CC cleaner does not remove them. >>>>> >>>>> But nothing works, cookies won't stand. >>>>> They seem to be stored but when you click on them you get the error >>>>> that >>>>> they are not found! >>>>> >>>>> This is a real big pain. >>>>> >>>>> Here is a Hijack log in case anything there may help. >>>>> Please help this is driving me mad LOL >>>>> >>>>> Logfile of Trend Micro HijackThis v2.0.2 >>>>> Scan saved at 23:45:43, on 13/06/2009 >>>>> Platform: Windows XP SP3 (WinNT 5.01.2600) >>>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850) >>>>> Boot mode: Normal >>>>> >>>>> Running processes: >> <SNIP> >>>>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe >>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe >> <SNIP> >>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe >> <SNIP> >>>>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe >>>>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe >> <SNIP> >>>>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe >>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe >>>>> E:\WINDOWS\Explorer.EXE >>>>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe >> <SNIP> >>>>> E:\WINDOWS\system32\RUNDLL32.EXE >>>>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe >> <SNIP> >>>>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe >> <SNIP> >>>>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe >> >> <SNIP> >>>>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - >>>>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) >> <SNIP> >>>>> O2 - BHO: Google Gears Helper - >>>>> {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - >>>>> E:\Program Files\Google\Google Gears\Internet >>>>> Explorer\0.5.21.0\gears.dll >> <SNIP> >>>>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone >>>>> Labs\ZoneAlarm\zlclient.exe >> <SNIP> >>>>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton >>>>> Ghost\Agent\GhostTray.exe >> <SNIP> >>>>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec >>>>> Shared\ccApp.exe >> <SNIP> >>>>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir >>>>> Desktop\avgnt.exe" /min >> <SNIP> >>>>> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search >>>>> & >>>>> Destroy\TeaTimer.exe >> <SNIP> >>>>> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - >>>>> Avira >>>>> GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe >>>>> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - >>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe >> <SNIP> >>>>> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec >>>>> Corporation - >>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe >>>>> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec >>>>> Corporation - E:\Program Files\Common Files\Symantec >>>>> Shared\ccPwdSvc.exe >>>>> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec >>>>> Corporation - E:\Program Files\Common Files\Symantec >>>>> Shared\ccSetMgr.exe <SNIP> O23 - Service: Norton Ghost - Symantec >>>>> Corporation - E:\Program Files\Norton Ghost\Agent\VProSvc.exe >> <SNIP> >>>>> O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program >>>>> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe >>>>> O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - >>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe |
|
06-14-2009, 04:10 PM
| |||
| |||
| Re: Lost log in cookies I don't understand. Is the problem fixed or not? Mike wrote: > HI > > I thought you might of solved it there! > > Disabled Zone Alarm and put Windows fire wall on. > However, once I had 'x' out of IE three times all my log in cookies were > being ignored. > > This is a horrible problem for sure. > > "Mike" wrote: > >> Hi >> >> Was on PC Q&A said IE6 was the problem. >> Its OK I quite like IE7 >> >> OK re Norton, no Ghost is my main back up and this is why you see the >> Norton stuff. >> I don't use the Nero thing at all. >> >> Been running Avira for some time now, AVG prior to that. >> >> The problem occured when I was usinging IE6. >> I installed IE7 after the June updates. >> >> I have used spybot and its tea timer for many years now. >> >> Auto Complete, forms is the only unchecked box. >> >> Yes I have put some of the sites into always allow. >> >> I'll try the Zone alarm test and report back shortly. >> >> Thanks >> >> >> >> >> "PA Bear [MS MVP]" wrote: >> >>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem >>>>>> but... >>> >>> Who told you that, Mike? >>> >>> Did you only recently install Avira AntiVir and had you been running >>> without any anti-virus protection until then? >>> >>> Your HijackThis log suggestes that you used to have a Norton application >>> installed which included Norton Ghost and Norton AntiVirus (e.g., Norton >>> System Works) and that you attempted to remove NAV, leaving Ghost in >>> place. Unfortunately, some NAV leftovers remain on your computer and >>> these may be the culprit here. >>> >>> Since you have Nero BackItUp installed, do you still need Ghost? >>> >>> How long has Spybot been installed and Tea Timer enabled? Do you >>> understand what Tea Timer does and how it does it? >>> >>> When did you install IE7, before or after you installed the June 2009 >>> updates? >>> >>> IE Tools | Internet Options | Content | AutoComplete | Settings | Use >>> AutoComplete for: What options, if any, are checked/enabled here? >>> >>> IE Tools | Internet Options | Privacy | Sites: Are the sites giving you >>> problems (e.g., Yahoo, eBay) listed in Managed Sites box with the >>> "Always >>> Allow" annotation? >>> >>> If you disable ZA and then enable the Windows Firewall, does the >>> unwanted >>> behavior persist? >>> -- >>> ~Robear Dyer (PA Bear) >>> MS MVP-IE, Mail, Security, Windows Client - since 2002 >>> >>> >>> Mike wrote: >>>> Bit more of an update. >>>> >>>> I found Windows live safety scanner installed despite my not having >>>> done >>>> so! >>>> Removed it thinking it was the reason for this but alas no. >>>> Also, installed Firefox but it has the exact same problem. >>>> The cookie will stand once but X out of IE twice and its gone. >>>> I just have no idea what is doing this? >>>> >>>> Suspect updates maybe? >>>> >>>> KB969897 >>>> >>>> KB938127-v2 (no info found) >>>> >>>> KB968537 >>>> KB969898 >>>> KB970238 >>>> KB961501 >>>> >>>> Be nice to get some help on this I see I am not alone >>>> >>>> "Mike" wrote: >>>>> Update. >>>>> >>>>> User log on cookies will not stand. >>>>> >>>>> Have scanned system in safe mode and no infections found. >>>>> >>>>> Using msconfig stopped all services and start ups other than MS ones. >>>>> >>>>> Problem continued. >>>>> >>>>> The browser (IE7) will store the cookie initially, it can be seen in >>>>> the >>>>> 'files' tab and if double clicked >>>>> you can read the information in the cookie. >>>>> >>>>> If you shut down IE and go back in the cookie seems ok and you are >>>>> still >>>>> logged in. >>>>> >>>>> However, do it a second time and the cookie does not work. >>>>> If you check the 'file' tab the cookie still shows but when you double >>>>> click on it >>>>> you get file/path not found error >>>>> >>>>> IE is set to medium. >>>>> >>>>> "Mike" wrote: >>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem >>>>>> but >>>>>> it has not. >>>>>> Towards the end of last week after a load of MS updates I suddenly >>>>>> found that I had to enter my log in details for all my sites like >>>>>> Yahoo, ebay and many forums. >>>>>> Everytime I shut down IE I seemed to lose my log in cookies. >>>>>> >>>>>> Using IE7 I have checked to always allow session cookies, set the >>>>>> security >>>>>> to medium. >>>>>> Cleared out all the caches, re built the cookies. >>>>>> Made sure CC cleaner does not remove them. >>>>>> >>>>>> But nothing works, cookies won't stand. >>>>>> They seem to be stored but when you click on them you get the error >>>>>> that they are not found! >>>>>> >>>>>> This is a real big pain. >>>>>> >>>>>> Here is a Hijack log in case anything there may help. >>>>>> Please help this is driving me mad LOL >>>>>> >>>>>> Logfile of Trend Micro HijackThis v2.0.2 >>>>>> Scan saved at 23:45:43, on 13/06/2009 >>>>>> Platform: Windows XP SP3 (WinNT 5.01.2600) >>>>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850) >>>>>> Boot mode: Normal >>>>>> >>>>>> Running processes: >>> <SNIP> >>>>>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe >>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe >>> <SNIP> >>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe >>> <SNIP> >>>>>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe >>>>>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe >>> <SNIP> >>>>>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe >>>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe >>>>>> E:\WINDOWS\Explorer.EXE >>>>>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe >>> <SNIP> >>>>>> E:\WINDOWS\system32\RUNDLL32.EXE >>>>>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe >>> <SNIP> >>>>>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe >>> <SNIP> >>>>>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe >>> >>> <SNIP> >>>>>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - >>>>>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) >>> <SNIP> >>>>>> O2 - BHO: Google Gears Helper - >>>>>> {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} >>>>>> - E:\Program Files\Google\Google Gears\Internet >>>>>> Explorer\0.5.21.0\gears.dll >>> <SNIP> >>>>>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone >>>>>> Labs\ZoneAlarm\zlclient.exe >>> <SNIP> >>>>>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton >>>>>> Ghost\Agent\GhostTray.exe >>> <SNIP> >>>>>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec >>>>>> Shared\ccApp.exe >>> <SNIP> >>>>>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir >>>>>> Desktop\avgnt.exe" /min >>> <SNIP> >>>>>> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - >>>>>> Search >>>>>> & Destroy\TeaTimer.exe >>> <SNIP> >>>>>> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - >>>>>> Avira GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe >>>>>> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - >>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe >>> <SNIP> >>>>>> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec >>>>>> Corporation - >>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe >>>>>> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec >>>>>> Corporation - E:\Program Files\Common Files\Symantec >>>>>> Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager >>>>>> (ccSetMgr) - Symantec Corporation - E:\Program Files\Common >>>>>> Files\Symantec Shared\ccSetMgr.exe <SNIP> O23 - Service: Norton Ghost >>>>>> - Symantec Corporation - E:\Program Files\Norton >>>>>> Ghost\Agent\VProSvc.exe >>> <SNIP> >>>>>> O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program >>>>>> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe >>>>>> O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - >>>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe |
|
06-15-2009, 12:21 AM
| |||
| |||
| Re: Lost log in cookies Hi Having real trouble posting here as well now :-( Yes to all your questons. I have taken all steps I can think of to isolate the cause including stoping all services and start ups other than MS ones. My system has worked for years without issue the only common changeI can think of is the June updates. I'll give it a few hours and see if my other full reply shows up! "PA Bear [MS MVP]" wrote: > > Was on PC Q&A said IE6 was the problem. > > I doubt it. > > > OK re Norton, no Ghost is my main back up and this is why you see the > > Norton > > stuff. > > Nevertheless, there are some leftovers from Norton System Works and they may > have something to do with your problems. Unfortunately, the only way to get > rid of them would also remove Ghost. > > > I don't use the Nero thing at all. > > Then why is it still installed & loading at boot? > > > Been running Avira for some time now, AVG prior to that. > > The Norton leftovers may have compromised the installs of both Avira and > AVG. > > > The problem occured when I was usinging IE6. > > I installed IE7 after the June updates. > > Then neither IE7 nor the June updates are causing your problems. > > > I have used spybot and its tea timer for many years now. > > Again, do you understand what Tea Timer does and how it does it? > > Did you disable (1) Tea Timer & SDHelper, (2) your anti-virus application, > and (3) ZoneAlarm *and then* (4) enable the Windows Firewall before you > installed WinXP SP3? > > > Yes I have put some of the sites into always allow. > > Does that include yahoo.com, ebay.com, and all of your forums (e.g., > pcqanda.com)? > > > Mike wrote: > > Was on PC Q&A said IE6 was the problem. > > Its OK I quite like IE7 > > > > OK re Norton, no Ghost is my main back up and this is why you see the > > Norton > > stuff. > > I don't use the Nero thing at all. > > > > Been running Avira for some time now, AVG prior to that. > > > > The problem occured when I was usinging IE6. > > I installed IE7 after the June updates. > > > > I have used spybot and its tea timer for many years now. > > > > Auto Complete, forms is the only unchecked box. > > > > Yes I have put some of the sites into always allow. > > > > I'll try the Zone alarm test and report back shortly. > > > > "PA Bear [MS MVP]" wrote: > >>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem > >>>>> but... > >> > >> Who told you that, Mike? > >> > >> Did you only recently install Avira AntiVir and had you been running > >> without any anti-virus protection until then? > >> > >> Your HijackThis log suggestes that you used to have a Norton application > >> installed which included Norton Ghost and Norton AntiVirus (e.g., Norton > >> System Works) and that you attempted to remove NAV, leaving Ghost in > >> place. > >> Unfortunately, some NAV leftovers remain on your computer and these may > >> be > >> the culprit here. > >> > >> Since you have Nero BackItUp installed, do you still need Ghost? > >> > >> How long has Spybot been installed and Tea Timer enabled? Do you > >> understand what Tea Timer does and how it does it? > >> > >> When did you install IE7, before or after you installed the June 2009 > >> updates? > >> > >> IE Tools | Internet Options | Content | AutoComplete | Settings | Use > >> AutoComplete for: What options, if any, are checked/enabled here? > >> > >> IE Tools | Internet Options | Privacy | Sites: Are the sites giving you > >> problems (e.g., Yahoo, eBay) listed in Managed Sites box with the "Always > >> Allow" annotation? > >> > >> If you disable ZA and then enable the Windows Firewall, does the unwanted > >> behavior persist? > >> -- > >> ~Robear Dyer (PA Bear) > >> MS MVP-IE, Mail, Security, Windows Client - since 2002 > >> > >> > >> Mike wrote: > >>> Bit more of an update. > >>> > >>> I found Windows live safety scanner installed despite my not having done > >>> so! > >>> Removed it thinking it was the reason for this but alas no. > >>> Also, installed Firefox but it has the exact same problem. > >>> The cookie will stand once but X out of IE twice and its gone. > >>> I just have no idea what is doing this? > >>> > >>> Suspect updates maybe? > >>> > >>> KB969897 > >>> > >>> KB938127-v2 (no info found) > >>> > >>> KB968537 > >>> KB969898 > >>> KB970238 > >>> KB961501 > >>> > >>> Be nice to get some help on this I see I am not alone > >>> > >>> "Mike" wrote: > >>>> Update. > >>>> > >>>> User log on cookies will not stand. > >>>> > >>>> Have scanned system in safe mode and no infections found. > >>>> > >>>> Using msconfig stopped all services and start ups other than MS ones. > >>>> > >>>> Problem continued. > >>>> > >>>> The browser (IE7) will store the cookie initially, it can be seen in > >>>> the > >>>> 'files' tab and if double clicked > >>>> you can read the information in the cookie. > >>>> > >>>> If you shut down IE and go back in the cookie seems ok and you are > >>>> still > >>>> logged in. > >>>> > >>>> However, do it a second time and the cookie does not work. > >>>> If you check the 'file' tab the cookie still shows but when you double > >>>> click on it > >>>> you get file/path not found error > >>>> > >>>> IE is set to medium. > >>>> > >>>> "Mike" wrote: > >>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this problem > >>>>> but > >>>>> it has not. > >>>>> Towards the end of last week after a load of MS updates I suddenly > >>>>> found > >>>>> that I had to enter my log in details for all my sites like Yahoo, > >>>>> ebay > >>>>> and many forums. > >>>>> Everytime I shut down IE I seemed to lose my log in cookies. > >>>>> > >>>>> Using IE7 I have checked to always allow session cookies, set the > >>>>> security > >>>>> to medium. > >>>>> Cleared out all the caches, re built the cookies. > >>>>> Made sure CC cleaner does not remove them. > >>>>> > >>>>> But nothing works, cookies won't stand. > >>>>> They seem to be stored but when you click on them you get the error > >>>>> that > >>>>> they are not found! > >>>>> > >>>>> This is a real big pain. > >>>>> > >>>>> Here is a Hijack log in case anything there may help. > >>>>> Please help this is driving me mad LOL > >>>>> > >>>>> Logfile of Trend Micro HijackThis v2.0.2 > >>>>> Scan saved at 23:45:43, on 13/06/2009 > >>>>> Platform: Windows XP SP3 (WinNT 5.01.2600) > >>>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850) > >>>>> Boot mode: Normal > >>>>> > >>>>> Running processes: > >> <SNIP> > >>>>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe > >>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > >> <SNIP> > >>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe > >> <SNIP> > >>>>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe > >>>>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe > >> <SNIP> > >>>>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > >>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe > >>>>> E:\WINDOWS\Explorer.EXE > >>>>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe > >> <SNIP> > >>>>> E:\WINDOWS\system32\RUNDLL32.EXE > >>>>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe > >> <SNIP> > >>>>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe > >> <SNIP> > >>>>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe > >> > >> <SNIP> > >>>>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - > >>>>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) > >> <SNIP> > >>>>> O2 - BHO: Google Gears Helper - > >>>>> {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - > >>>>> E:\Program Files\Google\Google Gears\Internet > >>>>> Explorer\0.5.21.0\gears.dll > >> <SNIP> > >>>>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone > >>>>> Labs\ZoneAlarm\zlclient.exe > >> <SNIP> > >>>>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton > >>>>> Ghost\Agent\GhostTray.exe > >> <SNIP> > >>>>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec > >>>>> Shared\ccApp.exe > >> <SNIP> > >>>>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir > >>>>> Desktop\avgnt.exe" /min > >> <SNIP> > >>>>> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search > >>>>> & > >>>>> Destroy\TeaTimer.exe > >> <SNIP> > >>>>> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - > >>>>> Avira > >>>>> GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe > >>>>> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - > >>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe > >> <SNIP> > >>>>> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec > >>>>> Corporation - > >>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > >>>>> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec > >>>>> Corporation - E:\Program Files\Common Files\Symantec > >>>>> Shared\ccPwdSvc.exe > >>>>> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec > >>>>> Corporation - E:\Program Files\Common Files\Symantec > >>>>> Shared\ccSetMgr.exe <SNIP> O23 - Service: Norton Ghost - Symantec > >>>>> Corporation - E:\Program Files\Norton Ghost\Agent\VProSvc.exe > >> <SNIP> > >>>>> O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program > >>>>> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > >>>>> O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - > >>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe > > |
|
06-15-2009, 11:30 AM
| |||
| |||
| Re: Lost log in cookies > Having real trouble posting here as well now You may prefer to access this newsgroup in your default newsreader (e.g., Outlook Express). Click this link: news://msnews.microsoft.com/microsof...plorer.general You were going to test this behavior after disabling ZA and then enabling the Windows Firewall. What effect, if any, did that have? If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites in question & log-in, then (4) close the IE window without logging-out, (5) reboot, and (6) revisit the sites, does the behavior persist? HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409 NB: If you don't fully understand what Tea Timer does and how it does it, leave it permanently disabled. > My system has worked for years without issue the only common change I can > think of is the June updates. Sorry, I was under the impression that you were experiencing the unwanted behavior prior to installing the June Update and IE7. Try the above for now then we'll consider other options, Mike. -- ~PA Bear Mike wrote: > Having real trouble posting here as well now :-( > > Yes to all your questons. > I have taken all steps I can think of to isolate the cause including > stoping > all services and start ups other than MS ones. > > My system has worked for years without issue the only common changeI can > think of is the June updates. > > I'll give it a few hours and see if my other full reply shows up! > > "PA Bear [MS MVP]" wrote: >>> Was on PC Q&A said IE6 was the problem. >> >> I doubt it. >> >>> OK re Norton, no Ghost is my main back up and this is why you see the >>> Norton stuff. >> >> Nevertheless, there are some leftovers from Norton System Works and they >> may have something to do with your problems. Unfortunately, the only way >> to get rid of them would also remove Ghost. >> >>> I don't use the Nero thing at all. >> >> Then why is it still installed & loading at boot? >> >>> Been running Avira for some time now, AVG prior to that. >> >> The Norton leftovers may have compromised the installs of both Avira and >> AVG. >> >>> The problem occured when I was usinging IE6. >>> I installed IE7 after the June updates. >> >> Then neither IE7 nor the June updates are causing your problems. >> >>> I have used spybot and its tea timer for many years now. >> >> Again, do you understand what Tea Timer does and how it does it? >> >> Did you disable (1) Tea Timer & SDHelper, (2) your anti-virus >> application, >> and (3) ZoneAlarm *and then* (4) enable the Windows Firewall before you >> installed WinXP SP3? >> >>> Yes I have put some of the sites into always allow. >> >> Does that include yahoo.com, ebay.com, and all of your forums (e.g., >> pcqanda.com)? >> >> >> Mike wrote: >>> Was on PC Q&A said IE6 was the problem. >>> Its OK I quite like IE7 >>> >>> OK re Norton, no Ghost is my main back up and this is why you see the >>> Norton >>> stuff. >>> I don't use the Nero thing at all. >>> >>> Been running Avira for some time now, AVG prior to that. >>> >>> The problem occured when I was usinging IE6. >>> I installed IE7 after the June updates. >>> >>> I have used spybot and its tea timer for many years now. >>> >>> Auto Complete, forms is the only unchecked box. >>> >>> Yes I have put some of the sites into always allow. >>> >>> I'll try the Zone alarm test and report back shortly. >>> >>> "PA Bear [MS MVP]" wrote: >>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this >>>>>>> problem >>>>>>> but... >>>> >>>> Who told you that, Mike? >>>> >>>> Did you only recently install Avira AntiVir and had you been running >>>> without any anti-virus protection until then? >>>> >>>> Your HijackThis log suggestes that you used to have a Norton >>>> application >>>> installed which included Norton Ghost and Norton AntiVirus (e.g., >>>> Norton >>>> System Works) and that you attempted to remove NAV, leaving Ghost in >>>> place. >>>> Unfortunately, some NAV leftovers remain on your computer and these may >>>> be >>>> the culprit here. >>>> >>>> Since you have Nero BackItUp installed, do you still need Ghost? >>>> >>>> How long has Spybot been installed and Tea Timer enabled? Do you >>>> understand what Tea Timer does and how it does it? >>>> >>>> When did you install IE7, before or after you installed the June 2009 >>>> updates? >>>> >>>> IE Tools | Internet Options | Content | AutoComplete | Settings | Use >>>> AutoComplete for: What options, if any, are checked/enabled here? >>>> >>>> IE Tools | Internet Options | Privacy | Sites: Are the sites giving you >>>> problems (e.g., Yahoo, eBay) listed in Managed Sites box with the >>>> "Always >>>> Allow" annotation? >>>> >>>> If you disable ZA and then enable the Windows Firewall, does the >>>> unwanted >>>> behavior persist? >>>> -- >>>> ~Robear Dyer (PA Bear) >>>> MS MVP-IE, Mail, Security, Windows Client - since 2002 >>>> >>>> >>>> Mike wrote: >>>>> Bit more of an update. >>>>> >>>>> I found Windows live safety scanner installed despite my not having >>>>> done >>>>> so! >>>>> Removed it thinking it was the reason for this but alas no. >>>>> Also, installed Firefox but it has the exact same problem. >>>>> The cookie will stand once but X out of IE twice and its gone. >>>>> I just have no idea what is doing this? >>>>> >>>>> Suspect updates maybe? >>>>> >>>>> KB969897 >>>>> >>>>> KB938127-v2 (no info found) >>>>> >>>>> KB968537 >>>>> KB969898 >>>>> KB970238 >>>>> KB961501 >>>>> >>>>> Be nice to get some help on this I see I am not alone >>>>> >>>>> "Mike" wrote: >>>>>> Update. >>>>>> >>>>>> User log on cookies will not stand. >>>>>> >>>>>> Have scanned system in safe mode and no infections found. >>>>>> >>>>>> Using msconfig stopped all services and start ups other than MS ones. >>>>>> >>>>>> Problem continued. >>>>>> >>>>>> The browser (IE7) will store the cookie initially, it can be seen in >>>>>> the >>>>>> 'files' tab and if double clicked >>>>>> you can read the information in the cookie. >>>>>> >>>>>> If you shut down IE and go back in the cookie seems ok and you are >>>>>> still >>>>>> logged in. >>>>>> >>>>>> However, do it a second time and the cookie does not work. >>>>>> If you check the 'file' tab the cookie still shows but when you >>>>>> double >>>>>> click on it >>>>>> you get file/path not found error >>>>>> >>>>>> IE is set to medium. >>>>>> >>>>>> "Mike" wrote: >>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this >>>>>>> problem >>>>>>> but >>>>>>> it has not. >>>>>>> Towards the end of last week after a load of MS updates I suddenly >>>>>>> found >>>>>>> that I had to enter my log in details for all my sites like Yahoo, >>>>>>> ebay >>>>>>> and many forums. >>>>>>> Everytime I shut down IE I seemed to lose my log in cookies. >>>>>>> >>>>>>> Using IE7 I have checked to always allow session cookies, set the >>>>>>> security >>>>>>> to medium. >>>>>>> Cleared out all the caches, re built the cookies. >>>>>>> Made sure CC cleaner does not remove them. >>>>>>> >>>>>>> But nothing works, cookies won't stand. >>>>>>> They seem to be stored but when you click on them you get the error >>>>>>> that >>>>>>> they are not found! >>>>>>> >>>>>>> This is a real big pain. >>>>>>> >>>>>>> Here is a Hijack log in case anything there may help. >>>>>>> Please help this is driving me mad LOL >>>>>>> >>>>>>> Logfile of Trend Micro HijackThis v2.0.2 >>>>>>> Scan saved at 23:45:43, on 13/06/2009 >>>>>>> Platform: Windows XP SP3 (WinNT 5.01.2600) >>>>>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850) >>>>>>> Boot mode: Normal >>>>>>> >>>>>>> Running processes: >>>> <SNIP> >>>>>>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe >>>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe >>>> <SNIP> >>>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe >>>> <SNIP> >>>>>>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe >>>>>>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe >>>> <SNIP> >>>>>>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe >>>>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe >>>>>>> E:\WINDOWS\Explorer.EXE >>>>>>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe >>>> <SNIP> >>>>>>> E:\WINDOWS\system32\RUNDLL32.EXE >>>>>>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe >>>> <SNIP> >>>>>>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe >>>> <SNIP> >>>>>>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe >>>> >>>> <SNIP> >>>>>>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - >>>>>>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) >>>> <SNIP> >>>>>>> O2 - BHO: Google Gears Helper - >>>>>>> {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - >>>>>>> E:\Program Files\Google\Google Gears\Internet >>>>>>> Explorer\0.5.21.0\gears.dll >>>> <SNIP> >>>>>>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone >>>>>>> Labs\ZoneAlarm\zlclient.exe >>>> <SNIP> >>>>>>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton >>>>>>> Ghost\Agent\GhostTray.exe >>>> <SNIP> >>>>>>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec >>>>>>> Shared\ccApp.exe >>>> <SNIP> >>>>>>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir >>>>>>> Desktop\avgnt.exe" /min >>>> <SNIP> >>>>>>> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - >>>>>>> Search >>>>>>> & >>>>>>> Destroy\TeaTimer.exe >>>> <SNIP> >>>>>>> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - >>>>>>> Avira >>>>>>> GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe >>>>>>> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - >>>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe >>>> <SNIP> >>>>>>> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec >>>>>>> Corporation - >>>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe >>>>>>> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec >>>>>>> Corporation - E:\Program Files\Common Files\Symantec >>>>>>> Shared\ccPwdSvc.exe >>>>>>> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec >>>>>>> Corporation - E:\Program Files\Common Files\Symantec >>>>>>> Shared\ccSetMgr.exe <SNIP> O23 - Service: Norton Ghost - Symantec >>>>>>> Corporation - E:\Program Files\Norton Ghost\Agent\VProSvc.exe >>>> <SNIP> >>>>>>> O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program >>>>>>> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe >>>>>>> O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, >>>>>>> LLC - >>>>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe |
|
06-15-2009, 02:40 PM
| |||
| |||
| Re: Lost log in cookies HI OK stopping ZA made no differance sadly :-( Mike "PA Bear [MS MVP]" wrote: > > Having real trouble posting here as well now > > You may prefer to access this newsgroup in your default newsreader (e.g., > Outlook Express). Click this link: > news://msnews.microsoft.com/microsof...plorer.general > > You were going to test this behavior after disabling ZA and then enabling > the Windows Firewall. What effect, if any, did that have? > > If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites in > question & log-in, then (4) close the IE window without logging-out, (5) > reboot, and (6) revisit the sites, does the behavior persist? > > HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409 > > NB: If you don't fully understand what Tea Timer does and how it does it, > leave it permanently disabled. > > > My system has worked for years without issue the only common change I can > > think of is the June updates. > > Sorry, I was under the impression that you were experiencing the unwanted > behavior prior to installing the June Update and IE7. Try the above for now > then we'll consider other options, Mike. > -- > ~PA Bear > > Mike wrote: > > Having real trouble posting here as well now :-( > > > > Yes to all your questons. > > I have taken all steps I can think of to isolate the cause including > > stoping > > all services and start ups other than MS ones. > > > > My system has worked for years without issue the only common changeI can > > think of is the June updates. > > > > I'll give it a few hours and see if my other full reply shows up! > > > > "PA Bear [MS MVP]" wrote: > >>> Was on PC Q&A said IE6 was the problem. > >> > >> I doubt it. > >> > >>> OK re Norton, no Ghost is my main back up and this is why you see the > >>> Norton stuff. > >> > >> Nevertheless, there are some leftovers from Norton System Works and they > >> may have something to do with your problems. Unfortunately, the only way > >> to get rid of them would also remove Ghost. > >> > >>> I don't use the Nero thing at all. > >> > >> Then why is it still installed & loading at boot? > >> > >>> Been running Avira for some time now, AVG prior to that. > >> > >> The Norton leftovers may have compromised the installs of both Avira and > >> AVG. > >> > >>> The problem occured when I was usinging IE6. > >>> I installed IE7 after the June updates. > >> > >> Then neither IE7 nor the June updates are causing your problems. > >> > >>> I have used spybot and its tea timer for many years now. > >> > >> Again, do you understand what Tea Timer does and how it does it? > >> > >> Did you disable (1) Tea Timer & SDHelper, (2) your anti-virus > >> application, > >> and (3) ZoneAlarm *and then* (4) enable the Windows Firewall before you > >> installed WinXP SP3? > >> > >>> Yes I have put some of the sites into always allow. > >> > >> Does that include yahoo.com, ebay.com, and all of your forums (e.g., > >> pcqanda.com)? > >> > >> > >> Mike wrote: > >>> Was on PC Q&A said IE6 was the problem. > >>> Its OK I quite like IE7 > >>> > >>> OK re Norton, no Ghost is my main back up and this is why you see the > >>> Norton > >>> stuff. > >>> I don't use the Nero thing at all. > >>> > >>> Been running Avira for some time now, AVG prior to that. > >>> > >>> The problem occured when I was usinging IE6. > >>> I installed IE7 after the June updates. > >>> > >>> I have used spybot and its tea timer for many years now. > >>> > >>> Auto Complete, forms is the only unchecked box. > >>> > >>> Yes I have put some of the sites into always allow. > >>> > >>> I'll try the Zone alarm test and report back shortly. > >>> > >>> "PA Bear [MS MVP]" wrote: > >>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this > >>>>>>> problem > >>>>>>> but... > >>>> > >>>> Who told you that, Mike? > >>>> > >>>> Did you only recently install Avira AntiVir and had you been running > >>>> without any anti-virus protection until then? > >>>> > >>>> Your HijackThis log suggestes that you used to have a Norton > >>>> application > >>>> installed which included Norton Ghost and Norton AntiVirus (e.g., > >>>> Norton > >>>> System Works) and that you attempted to remove NAV, leaving Ghost in > >>>> place. > >>>> Unfortunately, some NAV leftovers remain on your computer and these may > >>>> be > >>>> the culprit here. > >>>> > >>>> Since you have Nero BackItUp installed, do you still need Ghost? > >>>> > >>>> How long has Spybot been installed and Tea Timer enabled? Do you > >>>> understand what Tea Timer does and how it does it? > >>>> > >>>> When did you install IE7, before or after you installed the June 2009 > >>>> updates? > >>>> > >>>> IE Tools | Internet Options | Content | AutoComplete | Settings | Use > >>>> AutoComplete for: What options, if any, are checked/enabled here? > >>>> > >>>> IE Tools | Internet Options | Privacy | Sites: Are the sites giving you > >>>> problems (e.g., Yahoo, eBay) listed in Managed Sites box with the > >>>> "Always > >>>> Allow" annotation? > >>>> > >>>> If you disable ZA and then enable the Windows Firewall, does the > >>>> unwanted > >>>> behavior persist? > >>>> -- > >>>> ~Robear Dyer (PA Bear) > >>>> MS MVP-IE, Mail, Security, Windows Client - since 2002 > >>>> > >>>> > >>>> Mike wrote: > >>>>> Bit more of an update. > >>>>> > >>>>> I found Windows live safety scanner installed despite my not having > >>>>> done > >>>>> so! > >>>>> Removed it thinking it was the reason for this but alas no. > >>>>> Also, installed Firefox but it has the exact same problem. > >>>>> The cookie will stand once but X out of IE twice and its gone. > >>>>> I just have no idea what is doing this? > >>>>> > >>>>> Suspect updates maybe? > >>>>> > >>>>> KB969897 > >>>>> > >>>>> KB938127-v2 (no info found) > >>>>> > >>>>> KB968537 > >>>>> KB969898 > >>>>> KB970238 > >>>>> KB961501 > >>>>> > >>>>> Be nice to get some help on this I see I am not alone > >>>>> > >>>>> "Mike" wrote: > >>>>>> Update. > >>>>>> > >>>>>> User log on cookies will not stand. > >>>>>> > >>>>>> Have scanned system in safe mode and no infections found. > >>>>>> > >>>>>> Using msconfig stopped all services and start ups other than MS ones. > >>>>>> > >>>>>> Problem continued. > >>>>>> > >>>>>> The browser (IE7) will store the cookie initially, it can be seen in > >>>>>> the > >>>>>> 'files' tab and if double clicked > >>>>>> you can read the information in the cookie. > >>>>>> > >>>>>> If you shut down IE and go back in the cookie seems ok and you are > >>>>>> still > >>>>>> logged in. > >>>>>> > >>>>>> However, do it a second time and the cookie does not work. > >>>>>> If you check the 'file' tab the cookie still shows but when you > >>>>>> double > >>>>>> click on it > >>>>>> you get file/path not found error > >>>>>> > >>>>>> IE is set to medium. > >>>>>> > >>>>>> "Mike" wrote: > >>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this > >>>>>>> problem > >>>>>>> but > >>>>>>> it has not. > >>>>>>> Towards the end of last week after a load of MS updates I suddenly > >>>>>>> found > >>>>>>> that I had to enter my log in details for all my sites like Yahoo, > >>>>>>> ebay > >>>>>>> and many forums. > >>>>>>> Everytime I shut down IE I seemed to lose my log in cookies. > >>>>>>> > >>>>>>> Using IE7 I have checked to always allow session cookies, set the > >>>>>>> security > >>>>>>> to medium. > >>>>>>> Cleared out all the caches, re built the cookies. > >>>>>>> Made sure CC cleaner does not remove them. > >>>>>>> > >>>>>>> But nothing works, cookies won't stand. > >>>>>>> They seem to be stored but when you click on them you get the error > >>>>>>> that > >>>>>>> they are not found! > >>>>>>> > >>>>>>> This is a real big pain. > >>>>>>> > >>>>>>> Here is a Hijack log in case anything there may help. > >>>>>>> Please help this is driving me mad LOL > >>>>>>> > >>>>>>> Logfile of Trend Micro HijackThis v2.0.2 > >>>>>>> Scan saved at 23:45:43, on 13/06/2009 > >>>>>>> Platform: Windows XP SP3 (WinNT 5.01.2600) > >>>>>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850) > >>>>>>> Boot mode: Normal > >>>>>>> > >>>>>>> Running processes: > >>>> <SNIP> > >>>>>>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe > >>>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > >>>> <SNIP> > >>>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe > >>>> <SNIP> > >>>>>>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe > >>>>>>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe > >>>> <SNIP> > >>>>>>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > >>>>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe > >>>>>>> E:\WINDOWS\Explorer.EXE > >>>>>>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe > >>>> <SNIP> > >>>>>>> E:\WINDOWS\system32\RUNDLL32.EXE > >>>>>>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe > >>>> <SNIP> > >>>>>>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe > >>>> <SNIP> > >>>>>>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe > >>>> > >>>> <SNIP> > >>>>>>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - > >>>>>>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) > >>>> <SNIP> > >>>>>>> O2 - BHO: Google Gears Helper - > >>>>>>> {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - > >>>>>>> E:\Program Files\Google\Google Gears\Internet > >>>>>>> Explorer\0.5.21.0\gears.dll > >>>> <SNIP> > >>>>>>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone > >>>>>>> Labs\ZoneAlarm\zlclient.exe > >>>> <SNIP> > >>>>>>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton > >>>>>>> Ghost\Agent\GhostTray.exe > >>>> <SNIP> > >>>>>>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec > >>>>>>> Shared\ccApp.exe > >>>> <SNIP> > >>>>>>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir > >>>>>>> Desktop\avgnt.exe" /min > >>>> <SNIP> > >>>>>>> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - > >>>>>>> Search > >>>>>>> & > >>>>>>> Destroy\TeaTimer.exe > >>>> <SNIP> > >>>>>>> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - > >>>>>>> Avira > >>>>>>> GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe > >>>>>>> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - > >>>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe > >>>> <SNIP> > >>>>>>> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec > >>>>>>> Corporation - > >>>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > >>>>>>> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec > >>>>>>> Corporation - E:\Program Files\Common Files\Symantec > >>>>>>> Shared\ccPwdSvc.exe > >>>>>>> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec > >>>>>>> Corporation - E:\Program Files\Common Files\Symantec > >>>>>>> Shared\ccSetMgr.exe <SNIP> O23 - Service: Norton Ghost - Symantec > >>>>>>> Corporation - E:\Program Files\Norton Ghost\Agent\VProSvc.exe > >>>> <SNIP> > >>>>>>> O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program > >>>>>>> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe |
|
06-15-2009, 04:50 PM
| |||
| |||
| Re: Lost log in cookies Reposting: >> If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites in >> question & log-in, then (4) close the IE window without logging-out, (5) >> reboot, and (6) revisit the sites, does the behavior persist? >> >> HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409 >> >> NB: If you don't fully understand what Tea Timer does and how it does it, >> leave it permanently disabled. Mike wrote: > OK stopping ZA made no differance sadly :-( > > "PA Bear [MS MVP]" wrote: > >>> Having real trouble posting here as well now >> >> You may prefer to access this newsgroup in your default newsreader (e.g., >> Outlook Express). Click this link: >> news://msnews.microsoft.com/microsof...plorer.general >> >> You were going to test this behavior after disabling ZA and then enabling >> the Windows Firewall. What effect, if any, did that have? >> >> If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites in >> question & log-in, then (4) close the IE window without logging-out, (5) >> reboot, and (6) revisit the sites, does the behavior persist? >> >> HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409 >> >> NB: If you don't fully understand what Tea Timer does and how it does it, >> leave it permanently disabled. >> >>> My system has worked for years without issue the only common change I >>> can >>> think of is the June updates. >> >> Sorry, I was under the impression that you were experiencing the unwanted >> behavior prior to installing the June Update and IE7. Try the above for >> now then we'll consider other options, Mike. >> -- >> ~PA Bear >> >> Mike wrote: >>> Having real trouble posting here as well now :-( >>> >>> Yes to all your questons. >>> I have taken all steps I can think of to isolate the cause including >>> stoping >>> all services and start ups other than MS ones. >>> >>> My system has worked for years without issue the only common changeI can >>> think of is the June updates. >>> >>> I'll give it a few hours and see if my other full reply shows up! >>> >>> "PA Bear [MS MVP]" wrote: >>>>> Was on PC Q&A said IE6 was the problem. >>>> >>>> I doubt it. >>>> >>>>> OK re Norton, no Ghost is my main back up and this is why you see the >>>>> Norton stuff. >>>> >>>> Nevertheless, there are some leftovers from Norton System Works and >>>> they >>>> may have something to do with your problems. Unfortunately, the only >>>> way >>>> to get rid of them would also remove Ghost. >>>> >>>>> I don't use the Nero thing at all. >>>> >>>> Then why is it still installed & loading at boot? >>>> >>>>> Been running Avira for some time now, AVG prior to that. >>>> >>>> The Norton leftovers may have compromised the installs of both Avira >>>> and >>>> AVG. >>>> >>>>> The problem occured when I was usinging IE6. >>>>> I installed IE7 after the June updates. >>>> >>>> Then neither IE7 nor the June updates are causing your problems. >>>> >>>>> I have used spybot and its tea timer for many years now. >>>> >>>> Again, do you understand what Tea Timer does and how it does it? >>>> >>>> Did you disable (1) Tea Timer & SDHelper, (2) your anti-virus >>>> application, >>>> and (3) ZoneAlarm *and then* (4) enable the Windows Firewall before you >>>> installed WinXP SP3? >>>> >>>>> Yes I have put some of the sites into always allow. >>>> >>>> Does that include yahoo.com, ebay.com, and all of your forums (e.g., >>>> pcqanda.com)? >>>> >>>> >>>> Mike wrote: >>>>> Was on PC Q&A said IE6 was the problem. >>>>> Its OK I quite like IE7 >>>>> >>>>> OK re Norton, no Ghost is my main back up and this is why you see the >>>>> Norton >>>>> stuff. >>>>> I don't use the Nero thing at all. >>>>> >>>>> Been running Avira for some time now, AVG prior to that. >>>>> >>>>> The problem occured when I was usinging IE6. >>>>> I installed IE7 after the June updates. >>>>> >>>>> I have used spybot and its tea timer for many years now. >>>>> >>>>> Auto Complete, forms is the only unchecked box. >>>>> >>>>> Yes I have put some of the sites into always allow. >>>>> >>>>> I'll try the Zone alarm test and report back shortly. >>>>> >>>>> "PA Bear [MS MVP]" wrote: >>>>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this >>>>>>>>> problem >>>>>>>>> but... >>>>>> >>>>>> Who told you that, Mike? >>>>>> >>>>>> Did you only recently install Avira AntiVir and had you been running >>>>>> without any anti-virus protection until then? >>>>>> >>>>>> Your HijackThis log suggestes that you used to have a Norton >>>>>> application >>>>>> installed which included Norton Ghost and Norton AntiVirus (e.g., >>>>>> Norton >>>>>> System Works) and that you attempted to remove NAV, leaving Ghost in >>>>>> place. >>>>>> Unfortunately, some NAV leftovers remain on your computer and these >>>>>> may >>>>>> be >>>>>> the culprit here. >>>>>> >>>>>> Since you have Nero BackItUp installed, do you still need Ghost? >>>>>> >>>>>> How long has Spybot been installed and Tea Timer enabled? Do you >>>>>> understand what Tea Timer does and how it does it? >>>>>> >>>>>> When did you install IE7, before or after you installed the June 2009 >>>>>> updates? >>>>>> >>>>>> IE Tools | Internet Options | Content | AutoComplete | Settings | Use >>>>>> AutoComplete for: What options, if any, are checked/enabled here? >>>>>> >>>>>> IE Tools | Internet Options | Privacy | Sites: Are the sites giving >>>>>> you >>>>>> problems (e.g., Yahoo, eBay) listed in Managed Sites box with the >>>>>> "Always >>>>>> Allow" annotation? >>>>>> >>>>>> If you disable ZA and then enable the Windows Firewall, does the >>>>>> unwanted >>>>>> behavior persist? >>>>>> -- >>>>>> ~Robear Dyer (PA Bear) >>>>>> MS MVP-IE, Mail, Security, Windows Client - since 2002 >>>>>> >>>>>> >>>>>> Mike wrote: >>>>>>> Bit more of an update. >>>>>>> >>>>>>> I found Windows live safety scanner installed despite my not having >>>>>>> done >>>>>>> so! >>>>>>> Removed it thinking it was the reason for this but alas no. >>>>>>> Also, installed Firefox but it has the exact same problem. >>>>>>> The cookie will stand once but X out of IE twice and its gone. >>>>>>> I just have no idea what is doing this? >>>>>>> >>>>>>> Suspect updates maybe? >>>>>>> >>>>>>> KB969897 >>>>>>> >>>>>>> KB938127-v2 (no info found) >>>>>>> >>>>>>> KB968537 >>>>>>> KB969898 >>>>>>> KB970238 >>>>>>> KB961501 >>>>>>> >>>>>>> Be nice to get some help on this I see I am not alone >>>>>>> >>>>>>> "Mike" wrote: >>>>>>>> Update. >>>>>>>> >>>>>>>> User log on cookies will not stand. >>>>>>>> >>>>>>>> Have scanned system in safe mode and no infections found. >>>>>>>> >>>>>>>> Using msconfig stopped all services and start ups other than MS >>>>>>>> ones. >>>>>>>> >>>>>>>> Problem continued. >>>>>>>> >>>>>>>> The browser (IE7) will store the cookie initially, it can be seen >>>>>>>> in >>>>>>>> the >>>>>>>> 'files' tab and if double clicked >>>>>>>> you can read the information in the cookie. >>>>>>>> >>>>>>>> If you shut down IE and go back in the cookie seems ok and you are >>>>>>>> still >>>>>>>> logged in. >>>>>>>> >>>>>>>> However, do it a second time and the cookie does not work. >>>>>>>> If you check the 'file' tab the cookie still shows but when you >>>>>>>> double >>>>>>>> click on it >>>>>>>> you get file/path not found error >>>>>>>> >>>>>>>> IE is set to medium. >>>>>>>> >>>>>>>> "Mike" wrote: >>>>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this >>>>>>>>> problem >>>>>>>>> but >>>>>>>>> it has not. >>>>>>>>> Towards the end of last week after a load of MS updates I suddenly >>>>>>>>> found >>>>>>>>> that I had to enter my log in details for all my sites like Yahoo, >>>>>>>>> ebay >>>>>>>>> and many forums. >>>>>>>>> Everytime I shut down IE I seemed to lose my log in cookies. >>>>>>>>> >>>>>>>>> Using IE7 I have checked to always allow session cookies, set the >>>>>>>>> security >>>>>>>>> to medium. >>>>>>>>> Cleared out all the caches, re built the cookies. >>>>>>>>> Made sure CC cleaner does not remove them. >>>>>>>>> >>>>>>>>> But nothing works, cookies won't stand. >>>>>>>>> They seem to be stored but when you click on them you get the >>>>>>>>> error >>>>>>>>> that >>>>>>>>> they are not found! >>>>>>>>> >>>>>>>>> This is a real big pain. >>>>>>>>> >>>>>>>>> Here is a Hijack log in case anything there may help. >>>>>>>>> Please help this is driving me mad LOL >>>>>>>>> >>>>>>>>> Logfile of Trend Micro HijackThis v2.0.2 >>>>>>>>> Scan saved at 23:45:43, on 13/06/2009 >>>>>>>>> Platform: Windows XP SP3 (WinNT 5.01.2600) >>>>>>>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850) >>>>>>>>> Boot mode: Normal >>>>>>>>> >>>>>>>>> Running processes: >>>>>> <SNIP> >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe >>>>>> <SNIP> >>>>>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe >>>>>> <SNIP> >>>>>>>>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe >>>>>>>>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe >>>>>> <SNIP> >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe >>>>>>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe >>>>>>>>> E:\WINDOWS\Explorer.EXE >>>>>>>>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe >>>>>> <SNIP> >>>>>>>>> E:\WINDOWS\system32\RUNDLL32.EXE >>>>>>>>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe >>>>>> <SNIP> >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe >>>>>> <SNIP> >>>>>>>>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe >>>>>> >>>>>> <SNIP> >>>>>>>>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - >>>>>>>>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) >>>>>> <SNIP> >>>>>>>>> O2 - BHO: Google Gears Helper - >>>>>>>>> {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - >>>>>>>>> E:\Program Files\Google\Google Gears\Internet >>>>>>>>> Explorer\0.5.21.0\gears.dll >>>>>> <SNIP> >>>>>>>>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone >>>>>>>>> Labs\ZoneAlarm\zlclient.exe >>>>>> <SNIP> >>>>>>>>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton >>>>>>>>> Ghost\Agent\GhostTray.exe >>>>>> <SNIP> >>>>>>>>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec >>>>>>>>> Shared\ccApp.exe >>>>>> <SNIP> >>>>>>>>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir >>>>>>>>> Desktop\avgnt.exe" /min >>>>>> <SNIP> >>>>>>>>> O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - >>>>>>>>> Search >>>>>>>>> & >>>>>>>>> Destroy\TeaTimer.exe >>>>>> <SNIP> >>>>>>>>> O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - >>>>>>>>> Avira >>>>>>>>> GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe >>>>>>>>> O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - >>>>>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe >>>>>> <SNIP> >>>>>>>>> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec >>>>>>>>> Corporation - >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe >>>>>>>>> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec >>>>>>>>> Corporation - E:\Program Files\Common Files\Symantec >>>>>>>>> Shared\ccPwdSvc.exe >>>>>>>>> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec >>>>>>>>> Corporation - E:\Program Files\Common Files\Symantec >>>>>>>>> Shared\ccSetMgr.exe <SNIP> O23 - Service: Norton Ghost - Symantec >>>>>>>>> Corporation - E:\Program Files\Norton Ghost\Agent\VProSvc.exe >>>>>>>>> <SNIP> >>>>>>>>> O23 - Service: Symantec Core LC - Symantec Corporation - >>>>>>>>> E:\Program >>>>>>>>> Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe |
|
06-16-2009, 01:30 AM
| |||
| |||
| Re: Lost log in cookies Yes the problem continues! But as I said above I have switched everything off using msconfig apart from MS services and still the problem continues. But I have disabled tea timer and the IE add on for now despite having no trouble for years with it, I guess a update to spybot could have introduced something. "PA Bear [MS MVP]" wrote: > Reposting: > >> If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites in > >> question & log-in, then (4) close the IE window without logging-out, (5) > >> reboot, and (6) revisit the sites, does the behavior persist? > >> > >> HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409 > >> > >> NB: If you don't fully understand what Tea Timer does and how it does it, > >> leave it permanently disabled. > > Mike wrote: > > OK stopping ZA made no differance sadly :-( > > > > "PA Bear [MS MVP]" wrote: > > > >>> Having real trouble posting here as well now > >> > >> You may prefer to access this newsgroup in your default newsreader (e.g., > >> Outlook Express). Click this link: > >> news://msnews.microsoft.com/microsof...plorer.general > >> > >> You were going to test this behavior after disabling ZA and then enabling > >> the Windows Firewall. What effect, if any, did that have? > >> > >> If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites in > >> question & log-in, then (4) close the IE window without logging-out, (5) > >> reboot, and (6) revisit the sites, does the behavior persist? > >> > >> HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409 > >> > >> NB: If you don't fully understand what Tea Timer does and how it does it, > >> leave it permanently disabled. > >> > >>> My system has worked for years without issue the only common change I > >>> can > >>> think of is the June updates. > >> > >> Sorry, I was under the impression that you were experiencing the unwanted > >> behavior prior to installing the June Update and IE7. Try the above for > >> now then we'll consider other options, Mike. > >> -- > >> ~PA Bear > >> > >> Mike wrote: > >>> Having real trouble posting here as well now :-( > >>> > >>> Yes to all your questons. > >>> I have taken all steps I can think of to isolate the cause including > >>> stoping > >>> all services and start ups other than MS ones. > >>> > >>> My system has worked for years without issue the only common changeI can > >>> think of is the June updates. > >>> > >>> I'll give it a few hours and see if my other full reply shows up! > >>> > >>> "PA Bear [MS MVP]" wrote: > >>>>> Was on PC Q&A said IE6 was the problem. > >>>> > >>>> I doubt it. > >>>> > >>>>> OK re Norton, no Ghost is my main back up and this is why you see the > >>>>> Norton stuff. > >>>> > >>>> Nevertheless, there are some leftovers from Norton System Works and > >>>> they > >>>> may have something to do with your problems. Unfortunately, the only > >>>> way > >>>> to get rid of them would also remove Ghost. > >>>> > >>>>> I don't use the Nero thing at all. > >>>> > >>>> Then why is it still installed & loading at boot? > >>>> > >>>>> Been running Avira for some time now, AVG prior to that. > >>>> > >>>> The Norton leftovers may have compromised the installs of both Avira > >>>> and > >>>> AVG. > >>>> > >>>>> The problem occured when I was usinging IE6. > >>>>> I installed IE7 after the June updates. > >>>> > >>>> Then neither IE7 nor the June updates are causing your problems. > >>>> > >>>>> I have used spybot and its tea timer for many years now. > >>>> > >>>> Again, do you understand what Tea Timer does and how it does it? > >>>> > >>>> Did you disable (1) Tea Timer & SDHelper, (2) your anti-virus > >>>> application, > >>>> and (3) ZoneAlarm *and then* (4) enable the Windows Firewall before you > >>>> installed WinXP SP3? > >>>> > >>>>> Yes I have put some of the sites into always allow. > >>>> > >>>> Does that include yahoo.com, ebay.com, and all of your forums (e.g., > >>>> pcqanda.com)? > >>>> > >>>> > >>>> Mike wrote: > >>>>> Was on PC Q&A said IE6 was the problem. > >>>>> Its OK I quite like IE7 > >>>>> > >>>>> OK re Norton, no Ghost is my main back up and this is why you see the > >>>>> Norton > >>>>> stuff. > >>>>> I don't use the Nero thing at all. > >>>>> > >>>>> Been running Avira for some time now, AVG prior to that. > >>>>> > >>>>> The problem occured when I was usinging IE6. > >>>>> I installed IE7 after the June updates. > >>>>> > >>>>> I have used spybot and its tea timer for many years now. > >>>>> > >>>>> Auto Complete, forms is the only unchecked box. > >>>>> > >>>>> Yes I have put some of the sites into always allow. > >>>>> > >>>>> I'll try the Zone alarm test and report back shortly. > >>>>> > >>>>> "PA Bear [MS MVP]" wrote: > >>>>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this > >>>>>>>>> problem > >>>>>>>>> but... > >>>>>> > >>>>>> Who told you that, Mike? > >>>>>> > >>>>>> Did you only recently install Avira AntiVir and had you been running > >>>>>> without any anti-virus protection until then? > >>>>>> > >>>>>> Your HijackThis log suggestes that you used to have a Norton > >>>>>> application > >>>>>> installed which included Norton Ghost and Norton AntiVirus (e.g., > >>>>>> Norton > >>>>>> System Works) and that you attempted to remove NAV, leaving Ghost in > >>>>>> place. > >>>>>> Unfortunately, some NAV leftovers remain on your computer and these > >>>>>> may > >>>>>> be > >>>>>> the culprit here. > >>>>>> > >>>>>> Since you have Nero BackItUp installed, do you still need Ghost? > >>>>>> > >>>>>> How long has Spybot been installed and Tea Timer enabled? Do you > >>>>>> understand what Tea Timer does and how it does it? > >>>>>> > >>>>>> When did you install IE7, before or after you installed the June 2009 > >>>>>> updates? > >>>>>> > >>>>>> IE Tools | Internet Options | Content | AutoComplete | Settings | Use > >>>>>> AutoComplete for: What options, if any, are checked/enabled here? > >>>>>> > >>>>>> IE Tools | Internet Options | Privacy | Sites: Are the sites giving > >>>>>> you > >>>>>> problems (e.g., Yahoo, eBay) listed in Managed Sites box with the > >>>>>> "Always > >>>>>> Allow" annotation? > >>>>>> > >>>>>> If you disable ZA and then enable the Windows Firewall, does the > >>>>>> unwanted > >>>>>> behavior persist? > >>>>>> -- > >>>>>> ~Robear Dyer (PA Bear) > >>>>>> MS MVP-IE, Mail, Security, Windows Client - since 2002 > >>>>>> > >>>>>> > >>>>>> Mike wrote: > >>>>>>> Bit more of an update. > >>>>>>> > >>>>>>> I found Windows live safety scanner installed despite my not having > >>>>>>> done > >>>>>>> so! > >>>>>>> Removed it thinking it was the reason for this but alas no. > >>>>>>> Also, installed Firefox but it has the exact same problem. > >>>>>>> The cookie will stand once but X out of IE twice and its gone. > >>>>>>> I just have no idea what is doing this? > >>>>>>> > >>>>>>> Suspect updates maybe? > >>>>>>> > >>>>>>> KB969897 > >>>>>>> > >>>>>>> KB938127-v2 (no info found) > >>>>>>> > >>>>>>> KB968537 > >>>>>>> KB969898 > >>>>>>> KB970238 > >>>>>>> KB961501 > >>>>>>> > >>>>>>> Be nice to get some help on this I see I am not alone > >>>>>>> > >>>>>>> "Mike" wrote: > >>>>>>>> Update. > >>>>>>>> > >>>>>>>> User log on cookies will not stand. > >>>>>>>> > >>>>>>>> Have scanned system in safe mode and no infections found. > >>>>>>>> > >>>>>>>> Using msconfig stopped all services and start ups other than MS > >>>>>>>> ones. > >>>>>>>> > >>>>>>>> Problem continued. > >>>>>>>> > >>>>>>>> The browser (IE7) will store the cookie initially, it can be seen > >>>>>>>> in > >>>>>>>> the > >>>>>>>> 'files' tab and if double clicked > >>>>>>>> you can read the information in the cookie. > >>>>>>>> > >>>>>>>> If you shut down IE and go back in the cookie seems ok and you are > >>>>>>>> still > >>>>>>>> logged in. > >>>>>>>> > >>>>>>>> However, do it a second time and the cookie does not work. > >>>>>>>> If you check the 'file' tab the cookie still shows but when you > >>>>>>>> double > >>>>>>>> click on it > >>>>>>>> you get file/path not found error > >>>>>>>> > >>>>>>>> IE is set to medium. > >>>>>>>> > >>>>>>>> "Mike" wrote: > >>>>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this > >>>>>>>>> problem > >>>>>>>>> but > >>>>>>>>> it has not. > >>>>>>>>> Towards the end of last week after a load of MS updates I suddenly > >>>>>>>>> found > >>>>>>>>> that I had to enter my log in details for all my sites like Yahoo, > >>>>>>>>> ebay > >>>>>>>>> and many forums. > >>>>>>>>> Everytime I shut down IE I seemed to lose my log in cookies. > >>>>>>>>> > >>>>>>>>> Using IE7 I have checked to always allow session cookies, set the > >>>>>>>>> security > >>>>>>>>> to medium. > >>>>>>>>> Cleared out all the caches, re built the cookies. > >>>>>>>>> Made sure CC cleaner does not remove them. > >>>>>>>>> > >>>>>>>>> But nothing works, cookies won't stand. > >>>>>>>>> They seem to be stored but when you click on them you get the > >>>>>>>>> error > >>>>>>>>> that > >>>>>>>>> they are not found! > >>>>>>>>> > >>>>>>>>> This is a real big pain. > >>>>>>>>> > >>>>>>>>> Here is a Hijack log in case anything there may help. > >>>>>>>>> Please help this is driving me mad LOL > >>>>>>>>> > >>>>>>>>> Logfile of Trend Micro HijackThis v2.0.2 > >>>>>>>>> Scan saved at 23:45:43, on 13/06/2009 > >>>>>>>>> Platform: Windows XP SP3 (WinNT 5.01.2600) > >>>>>>>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850) > >>>>>>>>> Boot mode: Normal > >>>>>>>>> > >>>>>>>>> Running processes: > >>>>>> <SNIP> > >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe > >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > >>>>>> <SNIP> > >>>>>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe > >>>>>> <SNIP> > >>>>>>>>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe > >>>>>>>>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe > >>>>>> <SNIP> > >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > >>>>>>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe > >>>>>>>>> E:\WINDOWS\Explorer.EXE > >>>>>>>>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe > >>>>>> <SNIP> > >>>>>>>>> E:\WINDOWS\system32\RUNDLL32.EXE > >>>>>>>>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe > >>>>>> <SNIP> > >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe > >>>>>> <SNIP> > >>>>>>>>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe > >>>>>> > >>>>>> <SNIP> > >>>>>>>>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - > >>>>>>>>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) > >>>>>> <SNIP> > >>>>>>>>> O2 - BHO: Google Gears Helper - > >>>>>>>>> {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - > >>>>>>>>> E:\Program Files\Google\Google Gears\Internet > >>>>>>>>> Explorer\0.5.21.0\gears.dll > >>>>>> <SNIP> > >>>>>>>>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone > >>>>>>>>> Labs\ZoneAlarm\zlclient.exe > >>>>>> <SNIP> > >>>>>>>>> O4 - HKLM\..\Run: [Norton Ghost 10.0] E:\Program Files\Norton > >>>>>>>>> Ghost\Agent\GhostTray.exe > >>>>>> <SNIP> > >>>>>>>>> O4 - HKLM\..\Run: [ccApp] E:\Program Files\Common Files\Symantec > >>>>>>>>> Shared\ccApp.exe > >>>>>> <SNIP> > >>>>>>>>> O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir > >>>>>>>>> Desktop\avgnt.exe" /min > >>>>>> <SNIP> |
|
06-16-2009, 09:10 AM
| |||
| |||
| Re: Lost log in cookies Hi I just noticed another weird thing! When you add a site to the priovacy tab 'always allow' option it appears at the bottom of the list of 'always block' however when you log out of IE and go back the allowed entery is missing! Is this normal? "Mike" wrote: > Yes the problem continues! > > But as I said above I have switched everything off using msconfig apart from > MS services and still the problem continues. > But I have disabled tea timer and the IE add on for now despite having no > trouble for years with it, I guess a update to spybot could have introduced > something. > > "PA Bear [MS MVP]" wrote: > > > Reposting: > > >> If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites in > > >> question & log-in, then (4) close the IE window without logging-out, (5) > > >> reboot, and (6) revisit the sites, does the behavior persist? > > >> > > >> HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409 > > >> > > >> NB: If you don't fully understand what Tea Timer does and how it does it, > > >> leave it permanently disabled. > > > > Mike wrote: > > > OK stopping ZA made no differance sadly :-( > > > > > > "PA Bear [MS MVP]" wrote: > > > > > >>> Having real trouble posting here as well now > > >> > > >> You may prefer to access this newsgroup in your default newsreader (e.g., > > >> Outlook Express). Click this link: > > >> news://msnews.microsoft.com/microsof...plorer.general > > >> > > >> You were going to test this behavior after disabling ZA and then enabling > > >> the Windows Firewall. What effect, if any, did that have? > > >> > > >> If you (1) disable Spybot Tea Timer & (2) reboot, (3) visit the sites in > > >> question & log-in, then (4) close the IE window without logging-out, (5) > > >> reboot, and (6) revisit the sites, does the behavior persist? > > >> > > >> HOW TO disable Tea Timer: http://aumha.net/viewtopic.php?f=26&t=32409 > > >> > > >> NB: If you don't fully understand what Tea Timer does and how it does it, > > >> leave it permanently disabled. > > >> > > >>> My system has worked for years without issue the only common change I > > >>> can > > >>> think of is the June updates. > > >> > > >> Sorry, I was under the impression that you were experiencing the unwanted > > >> behavior prior to installing the June Update and IE7. Try the above for > > >> now then we'll consider other options, Mike. > > >> -- > > >> ~PA Bear > > >> > > >> Mike wrote: > > >>> Having real trouble posting here as well now :-( > > >>> > > >>> Yes to all your questons. > > >>> I have taken all steps I can think of to isolate the cause including > > >>> stoping > > >>> all services and start ups other than MS ones. > > >>> > > >>> My system has worked for years without issue the only common changeI can > > >>> think of is the June updates. > > >>> > > >>> I'll give it a few hours and see if my other full reply shows up! > > >>> > > >>> "PA Bear [MS MVP]" wrote: > > >>>>> Was on PC Q&A said IE6 was the problem. > > >>>> > > >>>> I doubt it. > > >>>> > > >>>>> OK re Norton, no Ghost is my main back up and this is why you see the > > >>>>> Norton stuff. > > >>>> > > >>>> Nevertheless, there are some leftovers from Norton System Works and > > >>>> they > > >>>> may have something to do with your problems. Unfortunately, the only > > >>>> way > > >>>> to get rid of them would also remove Ghost. > > >>>> > > >>>>> I don't use the Nero thing at all. > > >>>> > > >>>> Then why is it still installed & loading at boot? > > >>>> > > >>>>> Been running Avira for some time now, AVG prior to that. > > >>>> > > >>>> The Norton leftovers may have compromised the installs of both Avira > > >>>> and > > >>>> AVG. > > >>>> > > >>>>> The problem occured when I was usinging IE6. > > >>>>> I installed IE7 after the June updates. > > >>>> > > >>>> Then neither IE7 nor the June updates are causing your problems. > > >>>> > > >>>>> I have used spybot and its tea timer for many years now. > > >>>> > > >>>> Again, do you understand what Tea Timer does and how it does it? > > >>>> > > >>>> Did you disable (1) Tea Timer & SDHelper, (2) your anti-virus > > >>>> application, > > >>>> and (3) ZoneAlarm *and then* (4) enable the Windows Firewall before you > > >>>> installed WinXP SP3? > > >>>> > > >>>>> Yes I have put some of the sites into always allow. > > >>>> > > >>>> Does that include yahoo.com, ebay.com, and all of your forums (e.g., > > >>>> pcqanda.com)? > > >>>> > > >>>> > > >>>> Mike wrote: > > >>>>> Was on PC Q&A said IE6 was the problem. > > >>>>> Its OK I quite like IE7 > > >>>>> > > >>>>> OK re Norton, no Ghost is my main back up and this is why you see the > > >>>>> Norton > > >>>>> stuff. > > >>>>> I don't use the Nero thing at all. > > >>>>> > > >>>>> Been running Avira for some time now, AVG prior to that. > > >>>>> > > >>>>> The problem occured when I was usinging IE6. > > >>>>> I installed IE7 after the June updates. > > >>>>> > > >>>>> I have used spybot and its tea timer for many years now. > > >>>>> > > >>>>> Auto Complete, forms is the only unchecked box. > > >>>>> > > >>>>> Yes I have put some of the sites into always allow. > > >>>>> > > >>>>> I'll try the Zone alarm test and report back shortly. > > >>>>> > > >>>>> "PA Bear [MS MVP]" wrote: > > >>>>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this > > >>>>>>>>> problem > > >>>>>>>>> but... > > >>>>>> > > >>>>>> Who told you that, Mike? > > >>>>>> > > >>>>>> Did you only recently install Avira AntiVir and had you been running > > >>>>>> without any anti-virus protection until then? > > >>>>>> > > >>>>>> Your HijackThis log suggestes that you used to have a Norton > > >>>>>> application > > >>>>>> installed which included Norton Ghost and Norton AntiVirus (e.g., > > >>>>>> Norton > > >>>>>> System Works) and that you attempted to remove NAV, leaving Ghost in > > >>>>>> place. > > >>>>>> Unfortunately, some NAV leftovers remain on your computer and these > > >>>>>> may > > >>>>>> be > > >>>>>> the culprit here. > > >>>>>> > > >>>>>> Since you have Nero BackItUp installed, do you still need Ghost? > > >>>>>> > > >>>>>> How long has Spybot been installed and Tea Timer enabled? Do you > > >>>>>> understand what Tea Timer does and how it does it? > > >>>>>> > > >>>>>> When did you install IE7, before or after you installed the June 2009 > > >>>>>> updates? > > >>>>>> > > >>>>>> IE Tools | Internet Options | Content | AutoComplete | Settings | Use > > >>>>>> AutoComplete for: What options, if any, are checked/enabled here? > > >>>>>> > > >>>>>> IE Tools | Internet Options | Privacy | Sites: Are the sites giving > > >>>>>> you > > >>>>>> problems (e.g., Yahoo, eBay) listed in Managed Sites box with the > > >>>>>> "Always > > >>>>>> Allow" annotation? > > >>>>>> > > >>>>>> If you disable ZA and then enable the Windows Firewall, does the > > >>>>>> unwanted > > >>>>>> behavior persist? > > >>>>>> -- > > >>>>>> ~Robear Dyer (PA Bear) > > >>>>>> MS MVP-IE, Mail, Security, Windows Client - since 2002 > > >>>>>> > > >>>>>> > > >>>>>> Mike wrote: > > >>>>>>> Bit more of an update. > > >>>>>>> > > >>>>>>> I found Windows live safety scanner installed despite my not having > > >>>>>>> done > > >>>>>>> so! > > >>>>>>> Removed it thinking it was the reason for this but alas no. > > >>>>>>> Also, installed Firefox but it has the exact same problem. > > >>>>>>> The cookie will stand once but X out of IE twice and its gone. > > >>>>>>> I just have no idea what is doing this? > > >>>>>>> > > >>>>>>> Suspect updates maybe? > > >>>>>>> > > >>>>>>> KB969897 > > >>>>>>> > > >>>>>>> KB938127-v2 (no info found) > > >>>>>>> > > >>>>>>> KB968537 > > >>>>>>> KB969898 > > >>>>>>> KB970238 > > >>>>>>> KB961501 > > >>>>>>> > > >>>>>>> Be nice to get some help on this I see I am not alone > > >>>>>>> > > >>>>>>> "Mike" wrote: > > >>>>>>>> Update. > > >>>>>>>> > > >>>>>>>> User log on cookies will not stand. > > >>>>>>>> > > >>>>>>>> Have scanned system in safe mode and no infections found. > > >>>>>>>> > > >>>>>>>> Using msconfig stopped all services and start ups other than MS > > >>>>>>>> ones. > > >>>>>>>> > > >>>>>>>> Problem continued. > > >>>>>>>> > > >>>>>>>> The browser (IE7) will store the cookie initially, it can be seen > > >>>>>>>> in > > >>>>>>>> the > > >>>>>>>> 'files' tab and if double clicked > > >>>>>>>> you can read the information in the cookie. > > >>>>>>>> > > >>>>>>>> If you shut down IE and go back in the cookie seems ok and you are > > >>>>>>>> still > > >>>>>>>> logged in. > > >>>>>>>> > > >>>>>>>> However, do it a second time and the cookie does not work. > > >>>>>>>> If you check the 'file' tab the cookie still shows but when you > > >>>>>>>> double > > >>>>>>>> click on it > > >>>>>>>> you get file/path not found error > > >>>>>>>> > > >>>>>>>> IE is set to medium. > > >>>>>>>> > > >>>>>>>> "Mike" wrote: > > >>>>>>>>> HI, I was using IE 6 but was told to go to IE 7 to solve this > > >>>>>>>>> problem > > >>>>>>>>> but > > >>>>>>>>> it has not. > > >>>>>>>>> Towards the end of last week after a load of MS updates I suddenly > > >>>>>>>>> found > > >>>>>>>>> that I had to enter my log in details for all my sites like Yahoo, > > >>>>>>>>> ebay > > >>>>>>>>> and many forums. > > >>>>>>>>> Everytime I shut down IE I seemed to lose my log in cookies. > > >>>>>>>>> > > >>>>>>>>> Using IE7 I have checked to always allow session cookies, set the > > >>>>>>>>> security > > >>>>>>>>> to medium. > > >>>>>>>>> Cleared out all the caches, re built the cookies. > > >>>>>>>>> Made sure CC cleaner does not remove them. > > >>>>>>>>> > > >>>>>>>>> But nothing works, cookies won't stand. > > >>>>>>>>> They seem to be stored but when you click on them you get the > > >>>>>>>>> error > > >>>>>>>>> that > > >>>>>>>>> they are not found! > > >>>>>>>>> > > >>>>>>>>> This is a real big pain. > > >>>>>>>>> > > >>>>>>>>> Here is a Hijack log in case anything there may help. > > >>>>>>>>> Please help this is driving me mad LOL > > >>>>>>>>> > > >>>>>>>>> Logfile of Trend Micro HijackThis v2.0.2 > > >>>>>>>>> Scan saved at 23:45:43, on 13/06/2009 > > >>>>>>>>> Platform: Windows XP SP3 (WinNT 5.01.2600) > > >>>>>>>>> MSIE: Internet Explorer v7.00 (7.00.6000.16850) > > >>>>>>>>> Boot mode: Normal > > >>>>>>>>> > > >>>>>>>>> Running processes: > > >>>>>> <SNIP> > > >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe > > >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe > > >>>>>> <SNIP> > > >>>>>>>>> E:\Program Files\Avira\AntiVir Desktop\avguard.exe > > >>>>>> <SNIP> > > >>>>>>>>> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe > > >>>>>>>>> E:\Program Files\Norton Ghost\Agent\VProSvc.exe > > >>>>>> <SNIP> > > >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe > > >>>>>>>>> E:\WINDOWS\system32\ZoneLabs\vsmon.exe > > >>>>>>>>> E:\WINDOWS\Explorer.EXE > > >>>>>>>>> E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe > > >>>>>> <SNIP> > > >>>>>>>>> E:\WINDOWS\system32\RUNDLL32.EXE > > >>>>>>>>> E:\Program Files\Norton Ghost\Agent\GhostTray.exe > > >>>>>> <SNIP> > > >>>>>>>>> E:\Program Files\Common Files\Symantec Shared\ccApp.exe > > >>>>>> <SNIP> > > >>>>>>>>> E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe > > >>>>>> > > >>>>>> <SNIP> > > >>>>>>>>> O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - > > >>>>>>>>> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) > > >>>>>> <SNIP> > > >>>>>>>>> O2 - BHO: Google Gears Helper - > > >>>>>>>>> {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - > > >>>>>>>>> E:\Program Files\Google\Google Gears\Internet > > >>>>>>>>> Explorer\0.5.21.0\gears.dll > > >>>>>> <SNIP> > > >>>>>>>>> O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone > > >>>>>>>>> Labs\ZoneAlarm\zlclient.exe |
 |
| Bookmarks |
| Thread Tools | |
| |
Similar Threads | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Cookies blocked. Must accept all cookies to Sign In | angbob | Internet Explorer | 10 | 03-29-2009 03:37 AM |
| IE7 Cookies policy constantly being reset to "All Cookies" | AliHarris | Internet Explorer | 5 | 03-28-2009 08:22 PM |
| IE7 problem - cookies lost after open and close page in Internet Z | Steven Saporta | Internet Explorer | 2 | 12-31-2008 07:33 PM |
| Lost Cookies Folder | tommyvin | Windows XP | 1 | 07-08-2008 01:30 PM |
| Cookies blocked. Must accept all cookies to Sign In | angbob | Internet Explorer | 3 | 09-19-2007 04:24 AM |
| New To Technology Questions? | Do You Need Help with Your Computer or Device? | Do You Need Help with this site? |
