Security settings

Having apparently got rid of the "about:blank" hi-jack (thanks again for your help) I was advised to check the Security settings and disable a lot of the options to try to prevent re-infection.
I managed to do this in the Internet area, but for "Trusted Sites" the "Sites" and "Custom Level" buttons are greyed out for some reason so I can't alter those settings.
How do i reactivate those buttons to regain access?

 

Are you familiar with the registry? If so, have a look at the following registry key.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2

Look in the right pane for a value named "Flags ". Double click it and set the value data to 47 (hexadecimal). Be sure to back the key up first to be on the safe side. If you don't know how to use regedit it would be best to find somebody who does that can help you. Otherwise, post back and I or somebody else can explain it further.

Once you've changed the Flags value data, close all IE windows, then re-open IE and see if you have access to your trusted sites.

 

Without pasting a screenshot, I can describe exactly what's in the folder you have indicated:-

Default REG_SZ
SelfHealCount REG_DWORD 0x00000001 (1)

That's all there is.

 

See suggestion made here
http://www.windowsbbs.com/showthread.php?t=40420

 

Well, it would seem that something isn't quite right there. I've attached a couple of pics of mine and if you take a look at them you'll see that you're missing quite a bit. There is enough in the key that I had to scroll to see it all. That's why I attached two pictures. Maybe if you added the flags value the rest would get set when you opened IE but I really don't know. I kind of doubt it but you could try it and see. If you want to try back up the key and then right click in the right pane and choose new>DWORD Value and name it Flags. Then double click on it and give it a value of 47. Mine, as you can see on the pic is set to 43. That's because I've unchecked the box that says something about requiring https for all sites in this zone (in the window where you add sites to your trusted sites). If you try this I'd also delete that SelfHealCount DWORD. I'm not really sure what it is. I did a Google search for selfhealcount and it returned only 4 pages with it and they don't really say anything about it.

If that doesn't get you there I don't know. Maybe try reinstalling IE. How about the rest of those keys (1-5)? What do they have in them?

Can somebody else that reads this take a look at their registry and see what the key in question looks like? Anybody else have that SelfHealCount DWORD?

 

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2]
@=" "
"DisplayName "= "Trusted sites "
"Description "= "This zone contains Web sites that you trust not to damage your computer or data. "
"Icon "= "inetcpl.cpl#00004480 "
"CurrentLevel "=dword:00000000
"MinLevel "=dword:00010000
"RecommendedLevel "=dword:00010000
"Flags "=dword:00000047
"1001 "=dword:00000000
"1004 "=dword:00000001
"1200 "=dword:00000000
"1201 "=dword:00000001
"1400 "=dword:00000000
"1402 "=dword:00000000
"1405 "=dword:00000000
"1406 "=dword:00000000
"1407 "=dword:00000000
"1601 "=dword:00000000
"1604 "=dword:00000000
"1605 "=dword:00000000
"1606 "=dword:00000000
"1607 "=dword:00000000
"1608 "=dword:00000000
"1609 "=dword:00000001
"1800 "=dword:00000000
"1802 "=dword:00000000
"1803 "=dword:00000000
"1804 "=dword:00000000
"1805 "=dword:00000000
"1A00 "=dword:00000000
"1A02 "=dword:00000000
"1A03 "=dword:00000000
"1A04 "=dword:00000000
"1A05 "=dword:00000000
"1A06 "=dword:00000000
"1A10 "=dword:00000000
"1C00 "=dword:00030000
"1E05 "=dword:00030000
"1206 "=dword:00000000
"1806 "=dword:00000000
"1807 "=dword:00000000
"1808 "=dword:00000000
"1809 "=dword:00000003
"2100 "=dword:00000000
"2101 "=dword:00000001
"2102 "=dword:00000000
"2200 "=dword:00000000
"2201 "=dword:00000000
"2300 "=dword:00000001
"2000 "=dword:00000000

 

Just took another look and realized that Fitz is looking at the value for the Zones key, rather than the 2 subkey.

 

I'm at work now so can't check, but I'm pretty sure I didn't see a "2" sub-key in Zones. I'll check later on today.

 

My mistake.
In the Registry I found the 2 in Zones, found Flags, changed the value from zero to 47 and now the buttons are no longer greyed out.
Thanks for that.
There are no sites in there, but now I can also tweak the security settings.

 

My son was having a similar problem, so I sent him part of this thread, and it fixed his also. Happy days he was really getting frustrated.

 

Well I'm really pleased to learn that others have benefited from this thread.
Thanks are due to all of those who advised me.
I'm a lot wiser now about spyware, hijackers, the limitations of SpyWareBlaster, and internet security settings than I was last Sunday!

 

Zander--FWIW--My Zone 2 Flags is set at "00000043(67)" (hexadecimal 43). I have no problems with Options tabs being greyed out. So perhaps no difference between 43 and 47?

 

Mine is 43 also. I'm thinking it is because I allow http in my trusted zone. But it all works.

 

maggie's got it right. I mentioned it in one of my posts above. A quote from one of my posts above:

 

What is the significance of the number here? What's the difference between 43 and 47?

 

The difference is because of a setting in IE's options. Do this. First, set the DWORD in the registry to 47. Leave regedit open and then open IE and click tools>internet options>security. Click on trusted sites and then click on the sites button. Uncheck the line that says require server varification for all sights in this zone. Then click ok until you're out of IE options. Now bring up regedit again and click view>refresh and have a look at the setting that you set to 47. You'll see it's changed to 43. That's the only difference between the two DWORD values.

 

Zander--Somewhat idle question. What is the significance of all those numerical items in the various Zone keys? I have many more Restricted Sites than I have keys for example, so it would seem each key is not for a site. And most keys in Zone 4 (Restricted Sites) have (3) at the end of the D-WORD value while others have (1) or (0) (which normally means "on" and "off" respectively, but that does not seem too relative here).
P.S Sorry I missed your explanation of 47 and 43 earlier.

 

Hi,

You can find a description of Internet Explorer security zones registry entries here

http://support.microsoft.com/default.aspx?scid=182569

The Flags part explains how 43 or 47 reflects the settings

Pat

 

Thanks for that.
Since posting this topic, I've solved a shedload of problems by switching my browser to Firefox. Instead of fighting problems, Firefox prevents them from happening.