All Sites Show As Trusted

  • Thread starter Thread starter Howie Solomon
  • Start date Start date
H

Howie Solomon

Using: IE 6.0.2800.1106 SP1

I notice that any site I visit (new or old) appears
as a "trusted" site. I pull up Internet Options ->
Security settings and I have reset everything to default
values, though there were (and are) no entries in the
list of trusted sites. I rebooted and still any internet
site I visit shows as a trusted site.

Is there something else I need to do? Mess around
in the registry?

Thanks, Howie
 
Howie:

I do NOT know if it will help you, but I have been battling this problem for
a week now. I am using the AUMHA Forum and several good folks are helping
me. If you'd care to look at the thread of our investigation, it is here:
http://forum.aumha.org/viewtopic.php?t=7804. The problem of having all sites
coming up "trusted" when browsing was one of three that I had, all, we think
caused by adware, spyware and malware in general. We have not yet got the
"all sites trusted" problem licked, but we are working on it. My userid at
the forum website is "MauryDann". Good Luck! And if you find something that
fixes the problem could you post a reply here? I'm looking everywhere for a
solution.
 
Howie: I fixed my problem and this is how I did it.

Click Start, Run 'regedit'. Click down to
HKEY_CURRENT_USER/Software/Microsoft/WINDOWS/CurrentVersion/InternetSettings/ZoneMap/ProtocolDefaults/http

If the value is 2, change it to 3. I'll bet it is. If it's NOT 2, then I
don't know what the problem is. Close each level back to the top
individually, close regedit, and reboot. Hopefully, you will be rid of this
problem. BUT! To have this problem in the first place, you probably have an
infestation of adware/spyware/malware and need to get disinfected -- again,
see the Forum link for a lot of info on that. You may end up changing the
Registry only to have some sneaky plague bug change it back...

Hope it works for you, Sonny Nine Below
 
Howie:

I did find a solution. If you follow that link in my other post to the
AumHa Forum and then go to the end of that 5 page thread, you'll see what I
did in the registry. I tried to post it here but for some reason it didn't
post or posted somewhere else.
 
That was it indeed.
Thanks MauryDann.

As far as how it got on there in the first place
I'm not sure. I scrubbed the computer a couple
of weeks ago and I suspect this is left over.

Thanks again.
 
Hi all,

just in case anyone's still following this thread, I got landed with the
same problem this morning and SNB's suggestion seems to have fixed it.
Further to the comment that the problem is spyware / malware related, the
prob seems to have been caused by a CoolWebSearch variant, and, in my case,
affected IE5.5 on Win98SE.

I was frantically searching the web for XP drivers for an obscure video card
(didn't find em!) when Zone Alarm started bugging me about a program I'd
never seen before (can't recall the name, and unfortunately I can't find it
in the ZA logs). When I opened yet another browser window I noticed that my
homepage had been hijacked off to some site I'd also never heard of. Soon
also noticed that *.frames.crazywinnings.com had been added to my trusted
sites and could not be removed. Ran both Ad-Aware SE and Spybot - various
probs were found and fixed, but the crazywinnings thing stayed in my trusted
sites. Ran HijackThis and removed it - it came back. Ran CWShredder - it
found a CoolWebSearch variant and removed it, but still the thing remained
in trusted sites.

Eventually I searched the registry for "crazywinnings" and deleted the two
entries that it found under Zone Map. That got rid of the ever-present
trusted site, but all sites were still in the trusted zone as the OP in this
thread described.

I've been searching for a way to fix it until I found SNB's post via google
groups. The fix appears to have worked, but it's taken hours to do - haven't
these folks got anything better to do than hijack browsers? GGGGRRRRRR

Rob.
 
Im typing this in safemode because of 'crazywinnings' and
'topconverting' are such persistant pests. I hate safemode, i hate
registries. Using a moltoff cocktail of spyware managers, hijackthis
would find the crazywinnings and its various friends but upon delete
they would come back. your suggestion to do a search within the
registry editor worked best. thanks for the help. Make sure you search
and delete, research and delete until it doesnt find any more
crazywinnings. I searched for 'crazy' and there were at least 5
different listings. You will need to kill them all. And i would
strongly advise to inspect carefully where you find it, and kill all
the obviously suspect entries. for example 'flingstones',
'topconverting'...any whacky seaching thing.
 
Back
Top