Another question please

I guess I'll try my luck asking here since I don't know where to ask.
I have a question about making/understanding a .reg file, batch, script, whatever it's called, for editing the registry.

I hope it's okay to ask here.
I have the very basic understanding about it and I can delete a single entry with it, what I don't understand is,
Supposing that I made a reg file and the first 2 entries delete a subkeys, then another 2 entries after it(the same entries except they don't have the hyphen so it doesn't delete).
My question is, what is the purpose of the last two subkeys in that .reg?

If someone can enlighten me I'd really appreciate it.
~Emily

What I'm talking about is similar to this one.

This .reg was made to remove domains.

REGEDIT4

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]

[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]

On that example, it looks to me that the last 2 entries kind of cancel out the first 2.
Please explain it, thanks.

The BC registry tutorial should explain everything for you.

Yeah I've seen that page before when I went to their tutorial pages. it has a lot of info and it's great, but still didn't answer my question.
Thank you anyway.

I have moved this to the windows xp directory for a lack of a better place.

As for your question, you are right they do in a way cancel each other out. The first two lines delete the Domains subkey under HKLM and HKCU. The next two lines recreate them.

What this does for you, though, is give you a clean Domains subkey. Many malware adds their domains to these subkeys and add them as trusted domains. Then whenever you visit those sites, windows wont ask when installing new software.

By using the above reg file, you are wiping all possible domains listed under the Domain key, which in many cases is good. Then you are recreating that key becuase its a valid key and necessary for certain security features of IE.

It is important to note, though, that this method will wipe out ALL domains under this subkey, even ones that were added legitimately.