Real Time Warning - A confusing bug

  • Thread starter Thread starter Jim Nugent
  • Start date Start date
J

Jim Nugent

Hello,
I hope this is the right place to report this.

I recently added the site freeware.it-mate.co.uk to my IE Restricted zone.
MS AntiSpyware immediately gave me a warning popup about adding "co.uk" to
the Tusted Zone. Here is the detail from history:
----------------------------------------------------
Internet Explorer Trusted Sites alert
Occured on: 1/14/2005 at 5:25:03 PM
The user Jim, has decided to allow the trusted site co.uk to Internet
Explorer.
----------------------------------------------------
I wondered if it was bogus, but since I could always remove it by hand, I
allowed it. When I checked trusted sites, "co.uk" was not there.

When I looked in the zone map, I found a key and a sub key:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains\co.uk ]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains\co.uk \freeware.it-mate]
"*"=dword:00000004

The higher level key appears to reflect the top level domain. It had no
value.
The key under it had the expected "*"=dword:00000004 for a restricted site.
It looks like MS Anti-spyware got confused when it saw the first key, which
had no value and thought it was going into the trusted zone.
 
Sorry, Ark

MrB said:
Jim,
Remember, the Titanic has been found. Where is the Arc?

Jim Nugent said:
Hello,
I hope this is the right place to report this.

I recently added the site freeware.it-mate.co.uk to my IE Restricted
zone.
MS AntiSpyware immediately gave me a warning popup about adding "co.uk"
to
the Tusted Zone. Here is the detail from history:
----------------------------------------------------
Internet Explorer Trusted Sites alert
Occured on: 1/14/2005 at 5:25:03 PM
The user Jim, has decided to allow the trusted site co.uk to Internet
Explorer.
----------------------------------------------------
I wondered if it was bogus, but since I could always remove it by hand, I
allowed it. When I checked trusted sites, "co.uk" was not there.

When I looked in the zone map, I found a key and a sub key:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains\co.uk ]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains\co.uk \freeware.it-mate]
"*"=dword:00000004

The higher level key appears to reflect the top level domain. It had no
value.
The key under it had the expected "*"=dword:00000004 for a restricted
site.
It looks like MS Anti-spyware got confused when it saw the first key,
which
had no value and thought it was going into the trusted zone.
Click to expand...
Click to expand...
 
MrB said:
Jim,
Remember, the Titanic has been found. Where is the Arc?
Click to expand...

The *Arc* was a large bolt of lightning during the rain/thunderstorm that
caused the flood. :-)

The *Ark* was the boat, and was presumably deployed much, much earlier in
history than the Titanic, which would make it harder to pin down. Also there
is no reason to believe that the Ark is/was covered by seawater to preserve
it, since it presumably came to rest on dry land. IIRC, it would be in
Mesopotamia, now part of Iraq (if anywhere).

Finally, we also presume that unlike the Titanic, the Ark did fulfill its
mission, whether we can find it or not.
 
ITS not a bug that's how Microsoft antispyware suppose to
do it protect you from spyware/adware. it prevent spyware
from adding/removing/changing restricted site and trusted
site. so if you add freeware.it-mate.co.uk on restricted
site its completely safe to allow it because your telling
IE to add this site on Restricted site.

but if you didn't add anything or change setting on IE
and a popup alert show its probably an spyware/adware
trying to change IE Setting so its more vulnerable you
should block it when this happen

if you don't like getting pop-up alert when trying to add
website on restricted site and trusted site you should
change the setting on application agent checkpoint and
deactivate this will stop showing those annoying pop-up
alert

-----Original Message-----
Hello,
I hope this is the right place to report this.

I recently added the site freeware.it-mate.co.uk to my IE Restricted zone.
MS AntiSpyware immediately gave me a warning popup about adding "co.uk" to
the Tusted Zone. Here is the detail from history:
----------------------------------------------------
Internet Explorer Trusted Sites alert
Occured on: 1/14/2005 at 5:25:03 PM
The user Jim, has decided to allow the trusted site co.uk to Internet
Explorer.
----------------------------------------------------
I wondered if it was bogus, but since I could always remove it by hand, I
allowed it. When I checked trusted sites, "co.uk" was not there.

When I looked in the zone map, I found a key and a sub key:[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi
on\Internet
Settings\ZoneMap\Domains\co.uk ]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi
on\Internet
Settings\ZoneMap\Domains\co.uk \freeware.it-mate]
"*"=dword:00000004

The higher level key appears to reflect the top level domain. It had no
value.
The key under it had the expected "*"=dword:00000004 for a restricted site.
It looks like MS Anti-spyware got confused when it saw the first key, which
had no value and thought it was going into the trusted zone.
--
Jim
"Remember, an amateur built the Ark; professionals built the Titanic."









--

--
Jim Nugent
mailto:[email protected]


.
Click to expand...
 
Back
Top