View Full Version : question re registy and zonemap
Hello- I just registered with the forum, and have been using spybot for awhile now. By doing alittle digging around, I came upon a HUGE list located in my system registry-under "Zonemap >> Domains"
I scrolled thru it and found tons of sites listed I knew to be spy/malware..and saw alot of sites related to sex/porn.
My question is - Can I delete these from my registry without it hurting my computer? Secondly- is this just a record of sites I visited, or that have found their way to my system, or are they necessary to keep if there are sites that I visit often? Will it affect my computer at all if I just take them all off if this is just one of those 'log' type lists, that just take up space? :scratch:
Please advise.
Thank you for any advice !!
Are they at:
HKEY_CURRENT_USER / SOFTWARE / MICROSOFT / WINDOWS/ CURRENT VERSION / INTERNET SETTINGS / ZONEMAP / DOMAINS
with a value of four?
When you immunize with Spybot,it adds sites there to help protect you.
Good explanation here,in this post:
http://forums.spybot.info/showthread.php?t=281
md usa spybot fan
2006-02-11, 05:46
Entries like the one below with a dword of 00000004 represent sites that are in Internet Explorer's restricted zone:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\008i.com]
"*"=dword:00000004
See the following Microsoft article:
Microsoft Knowledge Base Article – 182569
Description of Internet Explorer security zones registry entries
http://support.microsoft.com/default.aspx?kbid=182569
If you use Spybot's immunization, SpywareBlaster or ie-spyad you will have many of these entries.
("Are they at:
HKEY_CURRENT_USER / SOFTWARE / MICROSOFT / WINDOWS/ CURRENT VERSION / INTERNET SETTINGS / ZONEMAP / DOMAINS
with a value of four?")
Yes thats where I've been finding them, and yes, they do have a value of 4. I had actually been scrolling through the list last night and deleting obvious 'bad' sites, and today, I went back and noticed some of them right back on there. So I take it this is something I should just leave alone huh. Thanks for the response and the links- that is very helpful.
There is one thing that is always present when I log onto the net; it's only been there a number of months, but I'm not sure what it is,but it seems to slow or stop my browser. (its only when I do a system scan with "hijack this", am I able to see it's back again), so I check the box to have the program take it off, but it never gets it off permanently. I've looked around in the registry but cant find it. Here is what it is :
HKLM\System\CCS\Services\Vxd\MSTCP:domain=aoldsl.net
Does anyone have any ideas?
(dont know if it matters, but I dont have DSL).
Thanks again for both of the responses from the 1st question ;)
If you deleted some of the 'bad' sites,you might want to reimmunize with Spybot,if you haven't already.
(also check spywareblaster,etc.if you have those).
re:aoldsl.net
See if this post helps:
http://forums.spybot.info/showthread.php?t=2132