HKEY_CURRENT_USER HELP Please

[scarecrowdr]

OK I not got a Clue about this un..First Time this has been Investigated in 9 Years of PC use..I'm BAFFLED!!
I had a couple of BADDIES---KaZaaLite/Wincap (26 of em)/Backdoor.IRC.Acnuz/CWS.oslogo/Haxdoor/Media Motor....Now I have Got ALL the STOPERS, ALL the Cleaners, AntiVirus/AntiTrojans..You name the Progy, I Use it or got it....So Please Don't ask what I use!!! (thanks)
I got these on BOTH my PCs since last night..Cleaned this un (or so I thought) Inspected the other this afternoon, n it was clean...Now at 5.00pm it had same as this PC..WTF is going on.....I Did install "RiptIt4Me + FixVTS" on this PC but Not on other..On other PC I only installed "Roxio Easy Media Creator 8"....Both PCs interconected via Router & Network Magic..Network Magic was used to transfer 2 files to other PC.....Have Deleted "RipIt4Me & FixVTS" in case it was them giveing me the probs.......
NOW THEN!-----I Have discovered something I never Knew was there..9 years n I'm Discovering things!! LOL
HKEY_CURRENT_USER/Software/Microsoft/Windows/currentversion/internet settings/zonemap/domains.<<<<<<in this domains I have HUNDREDS of crappy insulting Dissgusting .coms etc., that I have Never Browsed or clicked on in my Life..HOW DID THEY GET THERE!! Can I DELETE All that's in there..
Samples:- africaboys/boyporn/boy-rape/pornmags/Media Motor...to many to write down here.....Now, don't get me wrong..I'm Male, I do like porn! but I never Download it n Never click a link to it..So How do these Nasties get into ones PC...BOTH PCs....Is it SAFE to Delete All in "domains" or are they there for a purpose!!! ?
THANKS

[Welshjim]

scarecrowdr--Those are the sites in your Restricted Sites. (That's why some of the names are so tawdry.) Leave them.
I suspect you know what being in the Restricted Sites does. Among other things, no cookies can be deposited on your PC from these sites.
http://support.microsoft.com/kb/174360
http://www.webhero.org/Browsers/IERestrictedsites.htm

[scarecrowdr]

ARGhhhhhhh! i just Uninstalled 3 of em......THANKS for telling us Welshjim...Media Motor being one of em..But only because Media Motor was Detected in my System by XoftSpy..NEWDIAL & Command Service were the other two......Why on earth did XsoftSpy detect these as Invadeing my PC ? !!! Very Strange indeed...This happened on Both PCs..Talk about Friday 13th!!! LOL
How do I Re-Install those 3 files....Or is there no need to! ? THANKS.

[Welshjim]

scarecrowdr--I do not know how you populated your Restricted Sites list in the first place.
A program that will populate it for you is IESpyAds.
http://www.spywarewarrior.com/uiuc/resource.htm
It is well regarded. I do not know if it will replace the sites you deleted. But you can always check at that registry key. (If you know the URL's of the sites you deleted, you can just re-enter them into your Restricted Sites.)
To use IESpyAds, download the first IE-SpyAd.exe file offered--the "original". (There unfortunately is a lot of unnecessary verbiage about ZonedOut and IESpyAds2, which can be quite confusing.)
Click on the downloaded file|UnZip. That will put uninistall and install .reg files in your C:\IESpyAds folder. Click on the uninstall .reg file first. When that action is shown as sucessful, click on the install .reg file. Wait for the successful message again.

[fink]

Many spyware scanners aren't programmed to be aware of certain entries in the restricted sites list. Some need to catch up/be updated to ignore them. I never pay any attention to a scanner finding something in the restricted zone/zonemap/domains because I know they've been placed there on pupose by progs like spybot, iespyad, spywareblaster etc... I'd only be concerned if I did a hijackthis scan and found something bad in the trusted zone.

[scarecrowdr]

The problem is that there are many thousands if not millions of PC users that know NOWT about that part of the REG...It's taken me 9 years and a Misstake to find it there!!..Good Learning though on my part!...Hopefully!
Of all this time in useing XoftSpy, it has Always worked Flawlessly, so why did it come up with those files in the first place...If they were not mentioned I would not of gone searching for them......

Not related to this---But I installed Roxio Easy Media Creator 8 in my Other PC Now DELETED because I could not find the correct patch to run it properly....Now I find that On Starting BOTH PCs i get an icon in my Quick Launch on BOTH PCs that don't tell me what it is...On Clicking it, it vanishes n a Box pops up n says-----DIRECT CD--where did that come from..it says---"A driver is installed that causes Stability problems with your system. The driver will be dissabled"....Now then---I Have NEVER installed that progy on this PC...Is my Router or Network Magic doing this!! ?
VERY STRANGE INDEED!

Welshjim----I have downloaded ie-spyad & I have clicked on the "ie-ads-uninst.reg" then on the "ie-ads.reg". Do I also click on the Adults one in the Adults Folder ?
This is one program I've never used before...There again I'm only familiar with certain parts of the Reg as we have all discovered..lol..
THANKS for Helping.

[HAN]

Direct CD is from the Roxio EMC 8 package you had installed. It's the packet writing portion of the program that would allow you to use a CD-RW as a real-time drive (read and/or write to it just like a hard drive.)

I haven't used Easy Media Creator. It may be a great program. But I would never recommend the Direct CD part of the program. Packet writing programs just don't work as well as they are advertised.

As for how to get rid of it could be interesting. Did you uninstall EMC via the regular Add or Remove Programs routine? That should have gotten rid of it. No matter because if EMC is now gone, the Direct CD is still trying to run and causing an issue. You should go over to the EMC Uninstall forum and see if they can help you out. http://forums.support.roxio.com/index.php?showforum=9
Hopefully they can help get you back to normal fairly easily.

[lgbpop]

Xoftspy is rogueware and bad news. It's known for aggressive marketing and false positives that "persuade" you to purchase the product.

[scarecrowdr]

Thanks Han--I will investigate that link in a moo...I did Not Install Direct CD..I did a Customize install n left quite a few out...But I did Install "EasyWrite" in order for me to Read some OLD CDRWs/DVDRWs that was refuseing to read. I then Reformated them.
After a few startups later it was asking for that PaTCH. Could not download from Roxio as I do NOT want to join n have More Rubbish in my Email..
I use ADvanced Uninstaller to Uninstall my Progys..

Well igpop--I have used XofstSpy for ages n it's done and does a Great Job...
I don't suffer much from Nasties as I use Most of The Best progys to Deter n Find n Delete em..I'm Very Carefull these days...Though it seems I've been a bit Laksa Dazy
n something got in...First Time that XsoftSpy reported something that was Wrong n Not there....I still find that kind of crazzy!!....What is Bugging me is that RUDDY Driver from Roxio..Doing My HEAD IN on Both PCs n I only Installed on one PC...Work that un out!!!!!
Going to click on that link now..
Let you all know how it went...

[lgbpop]

Apparently, Xoftspy has cleaned up its act sufficiently to merit removal of its rogueware image by some reviewers. I stand by my personal opinion of it, though; it's just not as effective as other spyware removers.

[scarecrowdr]

Hi Good Peeps----Problem SOLVED...4 days of Headache Over...LOL
Found a link to Microsofts Site where they gave Instructions to Go into REG n Delete specific entries...Both PCs back as they were...PheeeW!

Here is a Link If anyone Else needs to use it..---
http://support.microsoft.com/?kbid=315345
Perhaps you can put it as a Sticky, so No one else has my Headache
THANKS & TAKE CARE..

P.S---Hope My CDR/DVDR Burners work 100%...

[scarecrowdr]

Now that I know how to put Solved in, I thought it Best to do so..
Thanks all for your Help..
HEADACHE Gone!