question re registy and zonemap - Safer-Networking Forums

aymee · 2006-02-11, 04:36

Hello- I just registered with the forum, and have been using spybot for awhile now. By doing alittle digging around, I came upon a HUGE list located in my system registry-under "Zonemap >> Domains"
I scrolled thru it and found tons of sites listed I knew to be spy/malware..and saw alot of sites related to sex/porn.
My question is - Can I delete these from my registry without it hurting my computer? Secondly- is this just a record of sites I visited, or that have found their way to my system, or are they necessary to keep if there are sites that I visit often? Will it affect my computer at all if I just take them all off if this is just one of those 'log' type lists, that just take up space?

Please advise.
Thank you for any advice !!

Zenobia · 2006-02-11, 05:41

Are they at:
HKEY_CURRENT_USER / SOFTWARE / MICROSOFT / WINDOWS/ CURRENT VERSION / INTERNET SETTINGS / ZONEMAP / DOMAINS
with a value of four?

When you immunize with Spybot,it adds sites there to help protect you.
Good explanation here,in this post:
http://forums.spybot.info/showthread.php?t=281

md usa spybot fan · 2006-02-11, 05:46

Entries like the one below with a dword of 00000004 represent sites that are in Internet Explorer's restricted zone:

Code:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\008i.com]
"*"=dword:00000004

See the following Microsoft article:

Microsoft Knowledge Base Article – 182569
Description of Internet Explorer security zones registry entries
http://support.microsoft.com/default.aspx?kbid=182569

If you use Spybot's immunization, SpywareBlaster or ie-spyad you will have many of these entries.

aymee · 2006-02-11, 07:29

("Are they at:
HKEY_CURRENT_USER / SOFTWARE / MICROSOFT / WINDOWS/ CURRENT VERSION / INTERNET SETTINGS / ZONEMAP / DOMAINS
with a value of four?")

Yes thats where I've been finding them, and yes, they do have a value of 4. I had actually been scrolling through the list last night and deleting obvious 'bad' sites, and today, I went back and noticed some of them right back on there. So I take it this is something I should just leave alone huh. Thanks for the response and the links- that is very helpful.
There is one thing that is always present when I log onto the net; it's only been there a number of months, but I'm not sure what it is,but it seems to slow or stop my browser. (its only when I do a system scan with "hijack this", am I able to see it's back again), so I check the box to have the program take it off, but it never gets it off permanently. I've looked around in the registry but cant find it. Here is what it is :

HKLM\System\CCS\Services\Vxd\MSTCP:domain=aoldsl.net

Does anyone have any ideas?
(dont know if it matters, but I dont have DSL).

Thanks again for both of the responses from the 1st question

Zenobia · 2006-02-11, 19:57

If you deleted some of the 'bad' sites,you might want to reimmunize with Spybot,if you haven't already.
(also check spywareblaster,etc.if you have those).

re:aoldsl.net
See if this post helps:
http://forums.spybot.info/showthread.php?t=2132

2006-02-11, 04:36	#1
aymee Junior Member Join Date: Feb 2006 Posts: 2	question re registy and zonemap Hello- I just registered with the forum, and have been using spybot for awhile now. By doing alittle digging around, I came upon a HUGE list located in my system registry-under "Zonemap >> Domains" I scrolled thru it and found tons of sites listed I knew to be spy/malware..and saw alot of sites related to sex/porn. My question is - Can I delete these from my registry without it hurting my computer? Secondly- is this just a record of sites I visited, or that have found their way to my system, or are they necessary to keep if there are sites that I visit often? Will it affect my computer at all if I just take them all off if this is just one of those 'log' type lists, that just take up space? Please advise. Thank you for any advice !!

2006-02-11, 05:46	#3
md usa spybot fan Spybot Advisor Team Join Date: Oct 2005 Posts: 5,879	Entries like the one below with a dword of 00000004 represent sites that are in Internet Explorer's restricted zone: Code: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\008i.com] "*"=dword:00000004 See the following Microsoft article: Microsoft Knowledge Base Article – 182569 Description of Internet Explorer security zones registry entries http://support.microsoft.com/default.aspx?kbid=182569 If you use Spybot's immunization, SpywareBlaster or ie-spyad you will have many of these entries. __________________ Getting an answer is one thing, learning is another. Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

2006-02-11, 05:41	#2
Zenobia Spybot Advisor Team Join Date: Oct 2005 Posts: 2,636	Are they at: HKEY_CURRENT_USER / SOFTWARE / MICROSOFT / WINDOWS/ CURRENT VERSION / INTERNET SETTINGS / ZONEMAP / DOMAINS with a value of four? When you immunize with Spybot,it adds sites there to help protect you. Good explanation here,in this post: http://forums.spybot.info/showthread.php?t=281

2006-02-11, 07:29	#4
aymee Junior Member Join Date: Feb 2006 Posts: 2	("Are they at: HKEY_CURRENT_USER / SOFTWARE / MICROSOFT / WINDOWS/ CURRENT VERSION / INTERNET SETTINGS / ZONEMAP / DOMAINS with a value of four?") Yes thats where I've been finding them, and yes, they do have a value of 4. I had actually been scrolling through the list last night and deleting obvious 'bad' sites, and today, I went back and noticed some of them right back on there. So I take it this is something I should just leave alone huh. Thanks for the response and the links- that is very helpful. There is one thing that is always present when I log onto the net; it's only been there a number of months, but I'm not sure what it is,but it seems to slow or stop my browser. (its only when I do a system scan with "hijack this", am I able to see it's back again), so I check the box to have the program take it off, but it never gets it off permanently. I've looked around in the registry but cant find it. Here is what it is : HKLM\System\CCS\Services\Vxd\MSTCP:domain=aoldsl.net Does anyone have any ideas? (dont know if it matters, but I dont have DSL). Thanks again for both of the responses from the 1st question

2006-02-11, 19:57	#5
Zenobia Spybot Advisor Team Join Date: Oct 2005 Posts: 2,636	If you deleted some of the 'bad' sites,you might want to reimmunize with Spybot,if you haven't already. (also check spywareblaster,etc.if you have those). re:aoldsl.net See if this post helps: http://forums.spybot.info/showthread.php?t=2132