Solved Dogdy Reg lines visable in regedit

[broeckie27]

Hi all,

I have been detecting a few dogdy adds in my registry
Actually did a search for a different regline in start run regedit but i came up to several others with a almost similar name..

Don t really understand this ,,,, I have reinstalled my laptop around 2 months ago***i m running regcleaner tools daily -cc cleaner
I have windows Security essentials running and updated*** i have quality malware applications running together with Mic Sec essentials
Also i have no applications installed that could case these registry lines to be there

Anybody any Suggestions as i tought my Pc was secured
Right now it feels like it isn t how can i keep my registry and my pc secure?

Thanks

 

[A Guy]

I think we'd need some examples of these dodgy entries. It might help determine their origin. A Guy

 

[broeckie27]

Thanks for help -

Hey a guy,

Thanks very much for your answer....

I have copied a few of those dodge registry lines downhere---- There s a lot more where that came from-- Thanks for your assistance in advance---

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\teenswamp.com

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\teramedix.com

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\thatindianthing.com

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\thephoenixfoundation.info

Tom

 

[xxxdannyxxx]

Some appear to be related to security software possibly spyware blaster.What makes you think they are "dodgey". - SpywareBlaster Registry Details

Danny

 

[Kari]

Hey a guy,

Thanks very much for your answer....

I have copied a few of those dodge registry lines downhere---- There s a lot more where that came from-- Thanks for your assistance in advance---

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\XXXXXXXX.com

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\YYYYYYYY.com

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ZZZZZZZZ.com

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ÅÅÅÅÅÅÅÅÅ.info

Tom

Maybe you should be a bit more careful when surfing. That first one for instance seems to suggest you have been on a teen porn site, at least that's what I got when I checked the URL (plus an angry look from my wife who saw this site on my screen when she brought coffee for me...). Didn't test the others.

Seriously, you never know what these sites leave on your computer.

Kari

P.S: I removed the URL's from the quote, I suggest you do the same with your original post!

 

[xxxdannyxxx]

Ive just had the same crack on the back of my head when I opened that

Danny

 

[A Guy]

Lol on Kari...busted.

Those entries are zone information for Internet Explorer, and since it is HKEY_CURRENT_USER they are from you, as opposed to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ which would be anyone using that machine. A Guy

 

[xxxdannyxxx]

This may be of help - Questions about HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet - Viruses, Spyware and other Nasties

Danny

 

[Bill2]

Look in Internet Properties - Security. There are 4 Zones, with varying degree of trust:

Restricted (totally untrusted)
Internet (somewhere in between)
Trusted sites (somewhere in between)
Local intranet (totally trusted)

Products like anti-spyware (and maybe also AV and popup blockers) can populate the Restricted zone and slip in those keys into the registry, so when you surf to one of those domains shock, the potentially malefic code provided by the crackers etc. will be ignored. The downside is the rich multimedia content provided by advertisers and other bright guys will also be missing...

 

[A Guy]

Good call Danny, Spyware Blaster indeed, from my registry:

I haven't been surfing like that either These are restricted zone entries. A Guy

 

[xxxdannyxxx]

Yer Bill 2 Hit the nail on the head.(No pun intended)

Danny

 

[A Guy]

BTW teenswamp? Really? LOL. A Guy

 

[broeckie27]

Hi all, thanks for these interesting updates i have been reading

Questions about HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet - Viruses, Spyware and other Nasties

and already downloaded a application on the site hopefully this help but there s no way to remove these lines from my registry? I could do it manually but this is gonna take long time

If no thanks also very much and have a nice day

Also i would like to mention that my surfing behaviour is very very normal
Don t really understand where these spammings are coming from

Take care guys and again thanks

 

[broeckie27]

Okay guys thanks very much for all your assistance on this one ---- doesn t seem to be a security issue here
as i runned 3 virusscanners - install uninstall- and did two malware scans with 1 possible threat as a result

I will have to remove those registry lines manually i guess and try to avoid certain sites although i seriously cannot remember any of these sites lol not kidding actually .......

Take care good night and thanks for the advice

 

[A Guy]

V, there is no need to remove those entries, in fact they are there, in the restricted zone of Internet Explorer to prevent you from going to malicious sites accidentally. For me they were placed there by Spyware Blaster as part of their Restricted Sites list. Just leave them be, they are good things

A Guy

 

[broeckie27]

Thanks for all updates i thought they were dogdy as the name were pretty weird --
Thanks for all the updates
I have learnt a lot

 

[broeckie27]

Thanks all for your replys much appreciated