For example if it's in the tree that blocks sites, then it's not an infection but a protection.

I find a lot of folk start blasting away at the registry before they do more research.