Default rules - typo??

Discussion in 'Ghost Security Suite (GSS)' started by tonyjl, Jan 25, 2006.

Thread Status:
Not open for further replies.
  1. tonyjl

    tonyjl Registered Member

    Joined:
    May 25, 2004
    Posts:
    287
    Hi guys.

    Just double-checking through me rules as there were a few mistakes pointed out to me,and i came across a couple of default rules in the 'web browser protection' group.

    HKEY_USERS\.default\Software\Microsoft\Windows\Currentversion\Internet settings

    with the values of 'safety warning level' , 'security_runactivexcontrols',etc.

    I thought about changing the '.default\' part to a '*' to cover the 's-1-5-21' keys aswell,so i checked the registry to see if those values were present in the other keys before i made any changes,and guess what? they're not,nor are they present in the keys listed the group o_O :doubt: .

    So i did a search,and found the following two keys:-
    hkcu\software\microsoft\internet explorer\security / safety warning level
    hku\s-1-5-21-1****\software\microsoft\internet explorer\security / safety warning level

    The other values 'security_runactivexcontrols,security_runscripts and trust warning level' aren't in my registry at all o_O.

    Anyone else have this? Anyone found other keys/values that don't match?
     
    Last edited: Jan 25, 2006
  2. TopperID

    TopperID Registered Member

    Joined:
    Oct 1, 2004
    Posts:
    1,527
    Location:
    London
    Sometimes a Key/Value can be used by malware and if the Key/Value does not exist on a particular machine the malware will simply create it. Protecting a non-existant item will prevent that from happening at no real cost to you.

    With the key you mention I'm currently protecting:-

    HKEY_USERS\*\Software\Microsoft\Internet explorer\Main**

    With no ill effects, so try it and see what it's like with you.

    Incidently, if you add:-

    HKEY_CURRENT_USER\Software\Microsoft\Internet explorer\Main

    and protect all values on that key, you will get rather more log activity!
     
  3. tonyjl

    tonyjl Registered Member

    Joined:
    May 25, 2004
    Posts:
    287
    Thanks TopperID :thumb: ,yeah,already got the keys you mentioned.
     
Thread Status:
Not open for further replies.