Block Spyware in Internet Explorer

First download and install Spyware Blaster. Then export the restricted sites from your registry and use group policy or a login script to push them to your users desktops.


Export Internet Explorer’s Trusted and Restricted Sites:

source: http://www.ghacks.net/2008/04/06/export-internet-explorers-trusted-and-restricted-sites/



Part of the security concept of Microsoft’s Internet Explorer are the zones which define security settings for Internet, Local Intranet, Trusted Sites and Restricted Sites. The settings for Internet and Local Intranet are global settings which are valid for all websites visited if they are not found in the Trusted or Restricted Sites list. Trusted and Restricted Sites can have different security settings which normally means lower security settings for trusted sites and higher ones for restricted websites.

You would for instance add websites like that of your bank, insurance company or even shopping sites like eBay or Amazon to the list of trusted websites while untrusted websites like Altavista would land in the untrusted sites list. The list grows quite a bit if you make use of that feature and primarily use Internet Explorer when surfing the Internet.

It would be quite redundant to add all websites again if you purchase a new computer, be it a new desktop computer or notebook. A far better solution – besides making the switch to Opera or Firefox – would be to export the zone settings and import them again in the new computer.

All domains are stored in the Registry and what you need to do is export the Registry key from the old computer and import it at the new one. Sounds easy right ? Start by opening your Registry Editor. I do it by using the shortcut Windows R, entering regedit and hitting enter.

Navigate to the Registry key HKEY_CURRENT_USER \Software \Microsoft \Windows \CurrentVersion \Internet Settings \ZoneMap \Domains and right-click the key Domains. Select Export from the menu and save it to your hard drive. Copy the saved file to the new computer and double-click it there to add it to the Registry.