- What are these registry keys?
- Posted by Herzl Regev on December 25th, 2005
In the registry, under
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet
Settings\ZoneMap\Domains, I have over 900 branches named for web domains that
I don't recognize but they do not look very positive. What are they and what
are they doing in my registry?
It seems that I have 5 more copies of this illustrious list, with
HKEY_CURRENT_USER replaced by HKEY_USERS\.DEFAULT, HKEY_USERS\S-1-5-18,
HKEY_USERS\S-1-5-19, HKEY_USERS\S-1-5-20, and
HKEY_USERS\S-1-5-21-1085031214-507921405-1957994488-1004. What did I do to
deserve those?
- Posted by Drew Tognola on December 25th, 2005
Herzl,
These are keys added by a spyware app that installed sometime in the past.
See here for details.
http://www.norton.com/avcenter/venc/...dware.cdt.html
It's safe to say that you can delete these references but definitely safe
your registry first.
"Herzl Regev" <HerzlRegev@discussions.microsoft.com> wrote in message
news:1F6EA191-7DF1-44D3-A689-64CCB9125F7C@microsoft.com...
> In the registry, under
> HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet
> Settings\ZoneMap\Domains, I have over 900 branches named for web domains
> that
> I don't recognize but they do not look very positive. What are they and
> what
> are they doing in my registry?
>
> It seems that I have 5 more copies of this illustrious list, with
> HKEY_CURRENT_USER replaced by HKEY_USERS\.DEFAULT, HKEY_USERS\S-1-5-18,
> HKEY_USERS\S-1-5-19, HKEY_USERS\S-1-5-20, and
> HKEY_USERS\S-1-5-21-1085031214-507921405-1957994488-1004. What did I do to
> deserve those?
- Posted by Incognitus on December 25th, 2005
"Herzl Regev" <HerzlRegev@discussions.microsoft.com> wrote in message
news:1F6EA191-7DF1-44D3-A689-64CCB9125F7C@microsoft.com...
> In the registry, under
> HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet
> Settings\ZoneMap\Domains, I have over 900 branches named for web domains
> that
> I don't recognize but they do not look very positive. What are they and
> what
> are they doing in my registry?
>
> It seems that I have 5 more copies of this illustrious list, with
> HKEY_CURRENT_USER replaced by HKEY_USERS\.DEFAULT, HKEY_USERS\S-1-5-18,
> HKEY_USERS\S-1-5-19, HKEY_USERS\S-1-5-20, and
> HKEY_USERS\S-1-5-21-1085031214-507921405-1957994488-1004. What did I do to
> deserve those?
Restricted Zone entries?
- Posted by FrankV on December 25th, 2005
Quite a while ago I found the same on my system, and still have it. I
tracked it down to one of the programs I use for pest control. I currently
have Ad-Aware, PestPatrol, SpyBot, Hijack This, Bazooka Scanner and MS
AntiSpyware along with Norton AV and ZoneAlarm Pro. I understood it was
created and used by one of these program (I think SpyBot). I wouldn't delete
it from the registry until someone could show that I was wrong about that
assumption.
Frank
"Herzl Regev" <HerzlRegev@discussions.microsoft.com> wrote in message
news:1F6EA191-7DF1-44D3-A689-64CCB9125F7C@microsoft.com...
> In the registry, under
> HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet
> Settings\ZoneMap\Domains, I have over 900 branches named for web domains
> that
> I don't recognize but they do not look very positive. What are they and
> what
> are they doing in my registry?
>
> It seems that I have 5 more copies of this illustrious list, with
> HKEY_CURRENT_USER replaced by HKEY_USERS\.DEFAULT, HKEY_USERS\S-1-5-18,
> HKEY_USERS\S-1-5-19, HKEY_USERS\S-1-5-20, and
> HKEY_USERS\S-1-5-21-1085031214-507921405-1957994488-1004. What did I do to
> deserve those?
