Bizarre Online Armor Website Entries

I don't understand how this could have happened and I'm really worried. After a browsing session I noticed a number of Web Sites entered as trusted in OA that I neither saw nor approved.
Such as:
www.arabiceurope.com.belkin, fls.doubleclick.net, www.arborvitae19.com.belkin, s0b.bluestreak.com, www.arquivosnaxa.co.cc.belkin, www.architecturemadefresh.com.belkin,
www.arizona-cabin-rentals.com.belkin, data.coremetrics.com, www.opium.se.belkin, www.ladadadada.net.belkin, fo-anyycs-l.ay1.b.yahoodns.net and several similar others.

I've never visited any of these web sites and I certainly never trusted them but there they are in OA's trusted website list. I've done a boot scan with Avast and complete scans with SAS and MBAM and all came up clean. I'm always in an LUA and have implemented a software restriction policy. Does anyone have any insights into what might be responsible for these strange entries. Help requested.

Dell Optiplex GX270 1.5GB RAM
Intel Pentium4 CPU 2.60GHz
XP Pro SP3 fully patched
Maxtor 80GB HDD
AV: avast! Home Edition 5.0.677
Browser: Fx 3.6.12
F/W: Online Armor Premium 4.5.1.431
Sandboxie Registered 3.50
SAS Free (on demand)
MBAM (on demand)
WinPatrol 2010 Plus
Spywareblaster
hpHosts & MVPS Hosts File (via HostsMan)
LUA and Software Restriction Policy

 

I have some weird sites as well , have no idea how they put those sites in there and why.

 

http://www.mywot.com/en/scorecard/s0b.bluestreak.com

 

Do you have a Belkin router (or modem)?

 

Yes, I have a Belkin wireless router. I changed the passwords yesterday to be safe. Could this be a factor?

 

The s0b.bluestreak.com website never opened. It was blocked by both WOT and my Hosts file. So how the heck does it end up as trusted in the OA websites list?

 

I checked a few (not all) of the sites you listed and they all came up clean at urlvoid.com.
I would be concerned, as you are, if I saw that in my OA configuration GUI.
I am nowhere near an expert, Halvah, so I can't advise you except to say what I would do...
I would untrust each site and see if anything happens to your connection.
Perhaps the newly trusted sites are part of OASIS ("Online Armor uses OASIS with every protection feature", i.e. maybe not just a whitelist and blacklist of programs).
I see you have posted your issue on the OA forums.
That's the best place for it.

 

These looks to be related to browsing session when some intermediate dns requests were served and supposedly some with aliases.
OA applies trust statuses according to masks/names, for example - you have a trusted mask for "*.com.au" and then OA finds a "123.com.au"...it will add it as trusted, then it finds some alias name to that 123.com.au... and this alias would be trusted too or not trusted...It depends on the trust status

 

Hi,

In my case I have quite a few sites including banking as protected but no sites are trusted. Today I saw the same banking site that is protected has a separate entry as trusted. This defeats the whole purpose. How can a protected site be also added as trusted? And I know that site has references to yads.zedo.com.

Many other sites are being added as trusted. I do not want to add ANY of the sites that are protected as trusted and also I do not want OA to add any site as trusted. Some explanations are given at

Code:

http://support.online-armor.com/showpost.php?p=134250&postcount=43

In my case this comments also do not hold good.

Code:

http://support.online-armor.com/showpost.php?p=134082&postcount=15

I have not specified ANY site as trusted so the explanation of alex on similarities, domains etc are beyond me. If I had added some sites as trusted then it would have still made some sense.

Can anyone of you who understands these things better explain how this is happening and the whether the explanations given on OA forum have any merit?

Thanks