O15 - Trusted Zone -> Couldn't be fixed

[Matze]

Download:
www.hijackthis.de/downloads/rem_english.zip

1 - Unzip the contents to the system32 folder for win XP/2K/NT/2003
and for others in system folder.

2 - Then run the rem.bat in safemode from within the system32 or system directory
and it will make a log of the files it finds.

3 - Start in normal mode

4 - Post the content from C:\log.txt to this forum.

Please don't open C:\bad.reg and C:\bad.zip, if exists. This is malware!

[roshaz]

- Then run the rem.bat in safemode from within the system32 or system
how do you do this.
i have win98 system

thanks
roshaz

[Cactus]

Try this...

To remove these...
O15 - Trusted Zone: *.frame.crazywinnings.com <<< EXAMPLE
O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM) <<< EXAMPLE

Download and run DELDOMAINS
Double click to open the DelDomains.inf.
To execute the file: right-click and Select 'Install' from the Menu.

Post back...


Cactus

[BipBip]

I'm french and my english is not very well so..
If the 2 solutions given up don't work this one will clean:

To copy the quotation in a file fix.txt (notpad) to below record it under c:\ then to change the extension into fix. reg.

REGEDIT4

[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion \URL]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion \URL]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion \URL\DefaultPrefix]
@="http://"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion \URL\Prefixes]
"ftp"="ftp://"
"gopher"="gopher://"
"home"="http://"
"mosaic"="http://"
"www"="http://"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion \Internet Settings\ZoneMap\ProtocolDefaults]
@=""
"http"=dword:00000003
"https"=dword:00000003
"ftp"=dword:00000003
"file"=dword:00000003
"@ivt"=dword:00000001
"shell"=dword:00000000

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ Internet Settings\ZoneMap\ProtocolDefaults]
@=""
"http"=dword:00000003
"https"=dword:00000003
"ftp"=dword:00000003
"file"=dword:00000003
"@ivt"=dword:00000001
"shell"=dword:00000000

To start in safe mode and then double to click on fix.reg
Restart and now all is right