Question About Setting Restricted Zone To ZERO Security

  • Thread starter Thread starter Cycloid Torus
  • Start date Start date
C

Cycloid Torus

Seems as soon as ASw allowed URL Search Hooks to be installed
"An Internet Explorer URL Search Hook
({CFBFAE00-17A6-11D0-99CB-00C04FD64497}) has been added to Internet Explorer
and has been automatically allowed. Microsoft AntiSpyware has determined
this program to be free of known spyware."

I started getting alerts about something trying to reduce the security
setting on the Restricted Zone:

"The user xxx, has decided to prevent the existing Internet Explorer
Security Zone Restricted sites level of 73728 from being changed to 0."

I think this is now "blocked" in all user accounts.
I ran ASw in Safe Mode (along with Norton 2004) and neither gave a peep.
Can anyone edify me as to what is going on or how I might find out?

Your help, as ever, is greatly appreciated.
 
The CLSID, CFBFAE00-17A6-11D0-99CB-00C04FD64497 , is associated with
IGetNet : http://www.doxdesk.com/parasite/IGetNet.html

Open MSAS and do a Full system scan with all 3 option boxes checked with
hidden files, folders, and system files showing :
http://www.xtra.co.nz/help/0,,4155-1916458,00.html

If IGetNet is detected, have MSAS remove it.
Next, go to Internet Options in the Control Panel and delete all files
and Cookies in Temporary Internet Files. On the first page, General,
click the Delete files button, put a check next to Delete all offline
content. Click OK. Click the Delete Cookies button.

Now go to Start, Run, and type in %temp%
Click OK. Delete ALL contents of this folder.

Empty the Recycle Bin.

Restart the system to Safe Mode : http://snipurl.com/dmbp
Do another Full system scan with MSAS.

This *should* remove IGetNet.

Steve Wechsler (akaMowGreen)
MS-MVP 2004-2005
Windows Sever - Software Distribution
Windows - Security

===============
*-343-* FDNY
Never Forgotten
===============
 
Back
Top