HijackThis and windows 7 -

[extent]

I have had a couple of issues pop up within hijackthis. I cannot fix or remove them, they just reappear in the next scan.

O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O15 - ProtocolDefaults: 'https' protocol is in My Computer Zone, should be Internet Zone (HKLM)

After a google, one forum from a couple of years back suggested to a user with the same problem to delete the registry entries at

HKEYCURRENTUSER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults.

Browsing my windows 7 registry, I have found that ProtocolDefaults does not exist in that location. ZoneMap exists but is empty.

Instead, I have found the correct 'ProtocolDefault' entry in 3 locations :-

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults

HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults

Within each of these 3 locations, http and https have a value of 3 (or 0x00000003), which the

microsoft website states as being the correct 'internet zone'. So what I am wondering is if HijackThis is giving me an incorrect warning of these protocols being in the My Computer zone, simply because the registry entry it believes should be there are not? Could this be because it expects me to be using a different version or update of windows, that may have these entries situated elsewhere? I am using 7 which is fully updated with the last version of hijackthis. Thanks for any helpful information

[Maurice Naggar]

Hi and welcome to Malwarebytes.

Please update MBAM, run a Quick Scan, and post its log.

Next, download DDS by sUBs and save it to your Desktop.

Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post only DDS.txt directly into your reply.

[Maurice Naggar]

No presence since 26 April. No reply after 4 days. I am closing this.