*.frame.crazywinnings.com in Trusted Sites

Bob0126 · Jan 15, 2005

I am unable to remove *.frame.crazywinnings.com from my trusted sites. It has caused problems with IE as well as Windows. (It's blocked me from trying to Restore a previous set-up.)

I am running WinXP Home edition.

My McAfee Virus Protectionis up to date and I have tried a number of scans, but no help.

I have updated Ad-Aware with the latest build and updates. I've scanned the drive but it comes up clean.

I have updated Hijack This to the latest version, but despite it finding *.frame.crazywinnings.com in Trusted Sites, it doesn't remove it. I've tried doing the scans in Safe Mode, but that hasn't fixed it either.

Has anyone been able to find a fix for this?

chaslang · Jan 16, 2005

Copy the contents of the Quote Box below to Notepad. Then click File and then Save As. Change the Save as Type to All Files. Name the file move.reg and then click save. (make sure you save it somewhere you can find it. Saving it to your Desktop may make that easy.)

REGEDIT4

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\frame.crazywinnings.com]
"*"=dword:00000002

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\frame.crazywinnings.com]
"*"=dword:00000004
Click to expand...

Double-click on the move.reg file on your desktop (or locate it with Windows Explorer and double click on it if not saved to the Desktop) and when it prompts to merge say yes.

Now run HJT and fix the the O15 - Trusted Zone: http://*.frame.crazywinnings.com lines
if you still see them(I doubt it).

Bob0126 · Jan 16, 2005

Thanks for the reply. It's gone, but the symptoms I had before remain.

When I use IE 6.0, I am unable click on buttons in Yahoo Mail.
I cannot click on most "Search" buttons, even in Win XP itself.

I am also unable to Restore a previous Windows setup. I get a blank window that just hangs when I attempt to open it, evn by clicking on rstrui.exe in my Windows directory.

Can I post an HJT log to see if I am missing something else?

I did not reboot after following your instructions. Should I have?

chaslang · Jan 16, 2005

First, please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal
If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

NOTE: In order to resolve the issues you are having it is very important that you at least try to perform all the steps as outlined. If you have any difficulty please post back letting us know what steps you have completed, what you found while doing the scans if anything and details about any problems you have encountered in completing the steps. The more details you can provide the better.

After doing ALL of the above if you still have a problem:

Make sure you have HijackThis 1.99 and follow the guidelines on where to install it and how to post a log as an attachment. This is all covered in the sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

Now post a HijackThis log as an attachment to your message (Do not post the log inline). All running programs should be closed, including your web browser, e-mail. Close before running Hijack This!

To repeat: Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder, for example C:\Program Files\HJT

Bob0126 · Jan 17, 2005

Success. Thanks very much for your help.

chaslang · Jan 18, 2005

You're welcome!

Log in or Sign up

*.frame.crazywinnings.com in Trusted Sites

Bob0126 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Bob0126 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Bob0126 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member