Author Topic: Removing a restricted site which does not appear in the list of restricted sites  (Read 2911 times)

0 Members and 1 Guest are viewing this topic.

Offline Brynn

  • Sr. Member
  • ****
  • Posts: 425
Hello :)
Someone recently referred me to a website, but when I visited the site, I saw that it is a Restricted Site (or a site in the Restricted Zone).  Prominently displayed on the homepage, it says "No Adware - No Spyware".  And I know that this could be a ploy to actually install adware or spyware.  But the referral came from a trusted friend, so I'm wondering if maybe the site has recently "cleaned up its act".

But my question is not to evaluate the site itself; I can handle that responsibility.  It's when I look in the list of sites in my Restricted Zone, it's not there.  It seems to me I've read somewhere, that sites added to the Restricted Zone by updates of various programs (Spybot S&D, IE-SpyAd, maybe Ad-Aware???, maybe Ewido???, maybe SpywareBlaster???, in my case) don't always show up in the list, but that doesn't mean it's not Restricted.  So that's fine, but what if I do all my homework and feel confident the site is safe?

1st Q -- How would I put it back into the Internet Zone....well, yes I know, remove it from the list of Restricted Sites.  But if it's not showing on the list, how would I remove it?  Enter it manually, and then remove it?
2nd Q -- Would it be safer to wait for security updates to remove it?  (which would indicate the site meets the safety requirements of one or more security programs)

Thanks for your help
"To sin by silence when they should protest makes cowards of men." - Abraham Lincoln

Offline Bubba

  • Visiting Experts
  • Newbie
  • *****
  • Posts: 23
The only way a site can be shown as being in the Restricted Zone is if it resides in the appropriate HKCU or HKLM registry hive.

SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains

Of the programs you mentioned that add sites to the Restricted Zone of IE are Spybot, Spywareblaster and IE-Spyad. The only one of those 3 that adds sites to the HKLM hive of the registry is IE-Spyad....in particular IE-Spyad2. If you are an IE-Spyad2 user there are side effects that can cause what you are seeing....or not seeing in your case.

http://www.spywarewarrior.com/uiuc/resource.htm#IESPYAD
Quote
Side Effects

When you install IE-SPYAD2 you should be aware of two side effects of using system-wide settings as opposed to user-specific settings for the Restricted sites list.

First, if you've added sites to the Trusted sites zone, the new Restricted sites may not show up in the Restricted sites box (Tools >> Options >> Security). This appears to be a quirk of Internet Explorer. What's happening is that Internet Explorer won't display sites loaded in the HKLM Registry hive (from IE-SPYAD2) if there are sites already loaded in the HKCU hive (from the Trusted sites zone).

Even though the Restricted sites may not display, however, Internet Explorer will still use the block list to restrict sites covered by the list.

Second, one other downside to using system-wide settings is that non-administrator users in Windows NT 4.0, Windows 2000, and Windows XP may not be able to see and edit the Restricted sites list in Internet Explorer.


Offline Brynn

  • Sr. Member
  • ****
  • Posts: 425
Yes, yes, that's what I had read.  So I know that I'm still protected, even though the site isn't in the list.  But my questions are, how do I remove the site from the Restricted Zone, if it's not in the list, and should I not do so at all and instead let updates from the various programs determine a site's safety and remove it.
"To sin by silence when they should protest makes cowards of men." - Abraham Lincoln

Offline Bubba

  • Visiting Experts
  • Newbie
  • *****
  • Posts: 23
my questions are, how do I remove the site from the Restricted Zone, if it's not in the list
You would have to either run regedit.exe and got to the HKLM section of the registry where sites are stored for IE(Trusted\Restricted) when using programs like IE-Spyad2....or....you could consider using a program called ZonedOut which will let you manage sites regardless of whether they are in the HKLM or HKCU hive of the registry.

http://www.spywarewarrior.com/uiuc/resource.htm#IESPYAD_ZO
Quote
IE-SPYAD users should consider using the recently released IE-SPYAD for ZonedOut, available below. This new version of IE-SPYAD uses the free ZonedOut security zones utility from FunkyToad to load and unload Restricted sites lists, making the management of sites in the Restricted sites zone much easier and more convenient.

should I not do so at all and instead let updates from the various programs determine a site's safety and remove it.
My opinion is based only on whether you are a user of IE-Spyad, Spywareblaster or Spybot's Immunization.

I would let those programs determine whether a site stays in their respective database unless you feel confident the site you remove can be somewhat trusted. The individuals of those programs add sites only after they have determined without a doubt a site needs to be restricted and they do not take adding an entry lightly.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 11536
  • "Stronger than the past, united in our goal."
    • Security Garden
Bubba, great explanation! 

Personally, Brynn, there are enough safe sites to visit on the internet.  Why go to such efforts to go to a site determined by security experts to be unsafe?

I would recommend FunkyToad's ZonedOut over the registry edit process.  (Funky Toad = toadbee, Admin at Gladiator Security Forum)
,  

Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline Brynn

  • Sr. Member
  • ****
  • Posts: 425
Ok, thanks guys :D
Good point, Corrine.  My reason for wanting to go to all that trouble is out of respect for the person who referred me to the site.  I don't really want to contact them again, inform them that it's Restricted, and ask for an alternative.  They might take it as an insult.

But anyway, that's my problem!  I hear what you're saying, and I will wait for the security groups to remove it, if it's to be removed.
Thanks again :)
All best.
"To sin by silence when they should protest makes cowards of men." - Abraham Lincoln