There is a discussion on this issue at ExpertsExchange here http://www.experts-exchange.com/Security/Q_21476978.html

<!snip>
IE6 has started putting the following address in the Trusted Sites Zone: http://*.0.0.0.0 I know that this is not normal using an *. Have found a file gr33n.exe and have removed it. Panda Activescan said that the virus was w32/sdbot.edp. It was adding an entry in HKLM/Software/Microsoft/Winnt/Winlogin/Shell Explorer.exe mmsvces.exe. I removed that entry and it worked for awhile until I accessed the internet. The shares stopped immediately. I cannot delete the entry in trusted sites. As I do they immediately returns to trusted sites under Internet options and security tab. I read an entry from years ago concerning the group policy being altered to include the http://*.0.0.0.0 entry but I am not using active directories and don't how to edit the group policy in order to check and see if the entry is there.

I created a fake gr33n.exe to see if that would prevent the http://*.0.0.0.0 from returning. Upon reboot, it didn't come back and I deleted the original file that had caused the initial problem.

<!endsnip>

HTH

Peter Kaulback

[EMAIL PROTECTED] wrote:
Hi All,
I have listed in my Internet Explorer's TRUSTED SITES an entry: *0.0.0.0. I can delete it but it comes right back. Does anybody know what this is? Have you been successful in getting rid of it?
Thanks
Tom Taylor


--
--
I haven't failed, I've found 10,000 ways that don't work.

Thomas Edison (1847-1931)
============= PCWorks Mailing List =================
Don't see your post? Check our posting guidelines &
make sure you've followed proper posting procedures,
http://pcworkers.com/rules.htm
Contact list owner <[EMAIL PROTECTED]>
Unsubscribing and other changes: http://pcworkers.com
=====================================================

Reply via email to