run scan

http://www.runscanner.net/


047 Trusted zones
-----------------
Zone: ads.pointroll.com : *.ads.pointroll.com
Zone: advertise.tucows.com : *.advertise.tucows.com
Zone: chidpaysite.com : *.chidpaysite.com
Zone: dialer.cjb.net : *.dialer.cjb.net
Zone: eeex.com : *.eeex.com
Zone: free-pics-and-mioves.com : *.free-pics-and-mioves.com
Zone: inserttiscock.com : *.inserttiscock.com
Zone: is0.net : *.is0.net
Zone: Look2Me : *.Look2Me
Zone: mrtg.ps.ru : *.mrtg.ps.ru
Zone: prbitexplorer.com : *.prbitexplorer.com
Zone: quicklauch.com : *.quicklauch.com
Zone: sharemege.com : *.sharemege.com

Hi did a runscan found these look suss, or r they normal MD

 

The trusted zone is blank by default and those entries look highly suspicious. Remove them.

 

thanks where do i remove them? there is nothing in IE trusted zone box

 

Run regedit and check HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains. Also check the same location but for HKEY_LOCAL_MACHINE.

See if the are any subkeys. In my example you can I added an entry for microsoft.com.

http://img296.imageshack.us/img296/1695/20070904222855az8.png

 

geez i got heaps in there i wonder if it was Ispyad a while back here is screenshot? all subkeys under domains there r listings A-Z then goes to Protocol Defaults after Z .... shall i delete them all..:O

http://img525.imageshack.us/my.php?image=untitledfz4.jpg


http://img505.imageshack.us/img505/1345/untitled1cm0.jpg


ok i know what i did i used Zoned out 3.5 few weeks ago , i seen them all in restricted zone in IE just then, all good i guess phewwwww must write down what i did lol.

 

Well theyre all mixed in there (trusted, restricted, and local intranet) so just find and delete teh entries from your first post.

 

ok thanks deleted them few musta got into trusted seesh!

 

Are you using the latest version of runscanner?

Version 0.9.x had bugs when it came to trusted zones.

 

yes downloaded latest from site
17 August 2007 : version 1.0 (final) released

did another scan all ok now