IE security zones hack- cure

For anyone who takes their internet security seriously and makes good use of their IE security settings options, there's few things more frustrating than a malware attack than disables some of those settings.

A very good security precaution with IE is to go to tools>internet options> security

where you will see four 'zones' (internet, local..., trusted, restricted)

If you set the 'internet zone' to 'high', you disable Java, Javascript, ActiveX controls etc.

In doing so you effectively disable 99% of all possible malware/virus attacks, as they rely on these scripts to attack your system.

The downside is that this also disables many aspects of decent websites that use these scripts for 'legitimate' purposes (though I would argue that most sites using these scripts do so unnecessarily, and, by doing so, are themselves responsible for the current state of internet shoddiness; but this isn't the time for that particular rant).

So, for example, some aspects on 'Home of Poi' may not function. The solution is to click on 'Trusted Sites', then on the 'sites' box, cpoy and paste the HoP address into the box and click on 'add'.

This puts HoP into your trusted zone, whose security you can set to 'medium', thus enabling HoP to run the scripts it wants.

--------------------

However, a fairly common malware/virus attack can leave some of your settings greyed out. For example an attack can add its own sites to your trusted zones, enabling it to run malicious script on your system (the aim being to trash, hack, steal credit card numbers, broadcast lists of sites you visit for 'marketing' purposes etc, etc)

Knowing that you may know enough about security to realise what its done and simply delete the changes, it may prevent this by disabling the boxes that alter security settings.

There's few things more frustrating than being unable to alter your own PCs security settings, or even being unable to view the list of addresses in your 'trusted sites' zone.

It's also very difficult to find info on the net about how to sort this out.

-------------

A recent attack left me unable to access my 'trusted sites' settings; fortunately I've managed to sort it out and I'm going to pass it on for anyone else in the same position.

It involves changing the registry, which can be very risky if you don't know what you're doing.

I'm not going to go into great detail about how to change registry settings as, if you don't know already then you shouldn't really be attempting this- get someone who does know to assist.

(I'm running win 2000, these settings will not necessarily be the same on all systems)

From Start> run type 'regedit' then go to this key: -

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\zones

(highlight the folder and go to 'Registry'> 'export...' on the top bar to save a backup in case you make a mistake.

The relevant zone is 2, so go to that

Towards the bottom is-

flags REG_DWORD

the value was set to 0x00000000 (0)

ie 'zero'

this had disabled both the ability to change the security setting and the ability to view/modify the sites in the trusted zone

'Right Click'> 'modify' and altering the value to '3', renabled both these settings

--------------------

The page which enabled me to sort this out is here: -

https://support.microsoft.com/default.aspx?scid=kb;en-us;182569

and it has a lot of info about other registry settings that affect security zones.

-----------------

Lastly, whilst searching the web looking for a solution I stumbled across this: -

https://netfiles.uiuc.edu/ehowes/www/resource.htm#IESPYAD

a useful piece of software that, via the registry, will load the internet addresses of many thousands of sites known to be malicious, into your 'restricted sites' security zone. By setting this zones security to 'high' you thus prevent these sites from loading their trashware onto your system.

(Again, bear in mind that any registry alterations are at your own risk).

"You can't outrun Death forever.
But you can make the Bastard work for it."

--MAJOR KORGO KORGAR,
"Last of The Lancers"
AFC 32

Educate your self in the Hazards of Fire Breathing STAY SAFE!

Forums > Social Discussion > IE security zones hack- cure