What is the "secure domains" section of the immunization database?

[el nemto]

Does it add trusted sites to the safe zone in IE or something?

[drragostea]

It's more like the Windows HOSTS file that it adds malicious domains too.

What the Immunization feature does is that it offers passive protection and protects your browser. This feature will add malicious domains to your browser domains so it will not accidentally visit a malicious site and thus preventing you from possibly getting infected.

[el nemto]

Ok, that's not my question. I understand what the immunization feature is.

I'm asking specifically what the entries labelled "secure domain" on the immunization list are in reference to, as it's a new addition to SB1.6 which I've only just recently started using.

[md usa spybot fan]

el nemto:

See the following thread:
Support Enhanced Security Configuration on Win2003 immunization
http://forums.spybot.info/project.php?issueid=237

[el nemto]

I'm still not sure what these entries are actually doing - do they function any differently from the other types of immunization entries (aside from the HOSTS file which I don't use)?

[md usa spybot fan]

el nemto:

Domain immunization entries add entries to the system's registry that place sites to the restricted sites zone by domain (site) name. The Secure Domain entries add a duplicate set of those restricted sites zone entries into registry keys that are used by Microsoft's Internet Explorer Enhanced Security feature.

For information on Internet Explorer Enhanced Security see:
What Is Internet Explorer Maintenance Extension?
http://technet2.microsoft.com/windowsserver/en/library/1f105ee4-b025-478c-a03e-77fcd91a64e41033.mspx?mfr=true
Download details: Managing Internet Explorer Enhanced Security ...
http://www.microsoft.com/downloads/details.aspx?FamilyID=d41b036c-e2e1-4960-99bb-9757f7e9e31b&DisplayLang=en
Adding Sites to the Enhanced Security Configuration Zones
http://msdn.microsoft.com/en-us/library/ms537181(VS.85).aspx
Enhanced Security Configuration for Internet Explorer
http://msdn.microsoft.com/en-us/library/ms537180.aspx

[el nemto]

Is it necessary for a computer running 32bit XP not on a network?

[md usa spybot fan]

el nemto:

If you read the reference I provided above:
Support Enhanced Security Configuration on Win2003 immunization
http://forums.spybot.info/project.php?issueid=237
You would see that I questioned the effectiveness (usefulness, helpfulness, value, etc.) of immunizing "Secure Domains" except on Windows 2003 Servers.

In that thread, PepiMK (Patrick M. Kolla – author of Spybot) indicated that tests support immunizing the "Secure Domains" on systems other than Windows 2003 Servers (in particular Windows XP).

I provided additional Microsoft references on the subject:
What Is Internet Explorer Maintenance Extension?
http://technet2.microsoft.com/windowsserver/en/library/1f105ee4-b025-478c-a03e-77fcd91a64e41033.mspx?mfr=true
Download details: Managing Internet Explorer Enhanced Security ...
http://www.microsoft.com/downloads/details.aspx?FamilyID=d41b036c-e2e1-4960-99bb-9757f7e9e31b&DisplayLang=en
Adding Sites to the Enhanced Security Configuration Zones
http://msdn.microsoft.com/en-us/library/ms537181(VS.85).aspx
Enhanced Security Configuration for Internet Explorer
http://msdn.microsoft.com/en-us/library/ms537180.aspx
_____


Is it necessary for a computer running 32bit XP not on a network?
Since there appears to be a difference of opinion between PepiMK (the expert in the field) and I concerning the effectiveness of adding "Secure Domains" immunization entries on systems other than Windows 2003 Servers, whether or not to add "Secure Domains" registry entries during immunization is an issue that you will have to determine for yourself using your best judgement.

_____

Personally, I have deleted the registry keys added by the Spybot's "Secure Domains" immunization and have unchecked the immunization items listed as "Secure Domains" so that they are no longer added during Spybot's immunization.

[el nemto]

Thanks for the information.