PDA

View Full Version : IE spyad and Spywareblaster restricted sites fail to appear


Dave2
January 19th, 2005, 07:21 AM
When I run spywareblaster's restricted zone settings, they don't appear in IE.
The registry keys do exist though in

My Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\

But when i go to these domains, the icon for restricted zone does not appear, so it seems IE is not using them.

When i experiment by manually adding to IE's restricted zone the key appears here

My computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\

So IE appears to be using those.

This is confirmed further by the fact that Eric Howe's IEspyad2, which creates keys for restricted sites appear there as well and work okay.

Also it seems that the side effects he warns of below, do not seem to affect me. I can manually add sites to the trusted zone, without the sites in the restricted zone becoming invisible.

{QUOTE-> Side Effects

When you install IE-SPYAD2 you should be aware of two side effects of using system-wide settings as opposed to user-specific settings for the Restricted sites list.

First, if you've added sites to the Trusted sites zone, the new Restricted sites may not show up in the Restricted sites box (Tools >> Options >> Security). This appears to be a quirk of Internet Explorer. What's happening is that Internet Explorer won't display sites loaded in the HKLM Registry hive (from IE-SPYAD2) if there are sites already loaded in the HKCU hive (from the Trusted sites zone).

Even though the Restricted sites may not display, however, Internet Explorer will still use the block list to restrict sites covered by the list.

Second, one other downside to using system-wide settings is that non-administrator users in Windows NT 4.0, Windows 2000, and Windows XP may not be able to see and edit the Restricted sites list in Internet Explorer. <-QUOTE}

Bubba
January 19th, 2005, 09:29 AM
Hey Dave,

What operating system are you using ?

Also....this has cropped up from time to time and was wondering if you would Please try something to help us troubleshoot this problem ?

If you agree....would you mind exporting the below registry keys for safe keeping....and then delete ONLY the Domains portion of those registry keys. After that....enable SpywareBlasters Restricted Sites protection and report back the results.

When we have finished....you can simply import\merge those saved registry keys back into the registry.

http://www.wilderssecurity.com/images/icons/icon4.gif the reg keys in bold only:http://www.wilderssecurity.com/images/icons/icon4.gif
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains

Dave2
January 19th, 2005, 11:40 AM
{QUOTE-> Hey Dave,

What operating system are you using ?

<-QUOTE}

XP Home SP2, I believe most people with the same problem are on XP too. I suspect it has something to do with hardening the local computer zone.

{QUOTE->
Also....this has cropped up from time to time and was wondering if you would Please try something to help us troubleshoot this problem ?

<-QUOTE}

Why not? sure.


{QUOTE->
If you agree....would you mind exporting the below registry keys for safe keeping....and then delete ONLY the Domains portion of those registry keys. After that....enable SpywareBlasters Restricted Sites protection and report back the results.

When we have finished....you can simply import\merge those saved registry keys back into the registry.

http://www.wilderssecurity.com/images/icons/icon4.gif the reg keys in bold only:http://www.wilderssecurity.com/images/icons/icon4.gif
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains <-QUOTE}

I did all that. Restarted. Then choose enable all protection in spywareblaster. Exact same problem.

Bubba
January 19th, 2005, 11:53 AM
{QUOTE-> Exact same problem. <-QUOTE}I was fairly certain before we tried that what the outcome was going to be....but I wanted to be sure we eliminated any possibility of conflicts. I was also fairly certain before we started that SpywareBlaster does not play a part in this problem due to the fact it accomplishes it's main objective when it installs the entries into the Current_User Domains key and after that it's up to IE to display them properly.

Have you attempted a repair of IE ?

Also....while I'm familar with Win2K and it's policies whereby a policy setting can be made to have all users abide by the Local_Macine settings....I do not have enough knowledge of XP Pro to know if there is such an animal in that OS ???

Dave2
January 19th, 2005, 11:56 AM
{QUOTE->
Also....while I'm familar with Win2K and it's policies whereby a policy setting can be made to have all users abide by the Local_Macine settings....I do not have enough knowledge of XP Pro to know if there is such an animal in that OS ??? <-QUOTE}

Heh, actually that was what I was hoping from you. Time to hit the microsoft website i guess, unless some expert chimes in...

Bubba
January 21st, 2005, 08:07 AM
Hey Dave,

Have you been able to determine what is possibly causing this ?

I took a look at a few things and was wondering if you have the below policy reg entry....and in particular the DWORD value below in bold ?

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_HKLM_only

Dave2
January 21st, 2005, 08:11 AM
{QUOTE-> Hey Dave,

Have you been able to determine what is possibly causing this ?

I took a look at a few things and was wondering if you have the below policy reg entry....and in particular the DWORD value below in bold ?

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_HKLM_only <-QUOTE}

Heh, funny how you posted this, about 6 minutes after I posted the solution in another thread.

Bubba
January 21st, 2005, 08:13 AM
{QUOTE-> Heh, funny how you posted this, about 6 minutes after I posted the solution in another thread. <-QUOTE}Which thread is that Dave ?

Edit
Never mind....I see where you updated us about your problem in this thread (http://www.wilderssecurity.com/showthread.php?t=55947).
Thanks for letting us know the outcome :)

Dave2
January 21st, 2005, 08:14 AM
Oh yes, just to add in case it isnt clear, removing that, fixes the problem

Bubba
January 21st, 2005, 08:24 AM
{QUOTE-> Oh yes, just to add in case it isnt clear, removing that, fixes the problem <-QUOTE}Thanks :)

It's difficult to notice when posts are made by Guests when following them on our Main page in the area dealing with What's Going On. The only name we see is {Guest}. Also....it's difficult to know if the Guest with your same sigin is indeed you or another Guest Dave2....since all Guests can use the same name if they wish. However....there can only be one registered member under the name Dave2.

In any case....thanks for updating us concerning your problem....no matter what thread you placed it in http://www.wilderssecurity.com/images/icons/icon14.gif