Registry Entires

This post isn't to report a problem, but more of a question. I have started to read up on the Windows Registry and as I was exploring the hkey_user tree came across some registry entries that upon 1st glance appear to be suspucious. The key
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History has a number of entries that I wonder if I can delete. For example, ".gator.com", "admonitor.com" etc.
Can these entries be deleted without causing a problem for an otherwise very smoothly running PC? Also, if anyone can provide some background information about the purpose of this part of the registry I'd be grateful.
By the way, try doing a search on Google for Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History and the results are scary.

Best Regards,

Dan

 

I have them as well.

I think they have something to do with your hosts file, or it could be something like the restricted sites in Spybot or Spyware Guard etc.

I'd leave them alone.

If you really want to delete them, back the key first, then try right-clicking and then permissions. (or try in Safe Mode)

 

S-1-5-18 is the SID for the LocalSystem account. Which means you most likely had gater running on your machine you booted up and it executed as localSystem which created the entries.

You are pretty safe to delete these gater related keys, however I would be careful about removing any other keys in this reg hive as they are related to the localsystem account.

 

It does NOT mean gator was running or present.

I have it listed on a new install which has never had gator.

Also, the same sites are listed in IE's restricted sites list.

 

It sounds as if there is some confusion about this. My hypothesis is that the sites listed (of which I have no knowledge of ever visiting) are either a list of restricted sites. I guess there is no way to determine the source of the registry key in any way. Is there?

 

No confusion. Thats a list of spybot immunization settings.


It definately doesn't mean you were once infected.