DSO Exploit & Spybot ?
Dale Edens November 6, 2004 4:40 AM I got rid of 'DSO' exploit my doing the following. A further comment... The 2 detections they added to that category today, which is where the DSO detections are coming from are "Zonemap.Domains" and "Zonemap.Ranges". As I understand it, it is a Data Source Object vulnerability in Internet Explorer, Outlook and Outlook Express (something like a security hole that spyware uses). have a peek at this web-site
Im of two minds to pull the plug reinstall my system to its virgin state and not venture onto the net except via the public library , why cant some one I'm just thinking that maybe there was a fault in the download? Other browsers and operating systems aren't affected. I read your take on the DSO exploit, and you are right on track.
ProduKey9. The bottom line: If you're fully up-to-date on Internet Explorer patches, you can safely ignore Spybot's report of a DSO Exploit. Make sure you're up-to-date and you should be safe.
There are two sites that like to be fighting over which one is my homepage and they are: - www.othersearch.com - www.worldsex.co.yu Its the worldsex which is the worst because when Thankyou, Lavender! To clarify for subsequent readers: DSO *is* something you want to fix. An 18 year career as a programmer at Microsoft soon followed.
j. Hope this helps, as it is "to the best of my knowledge" and "as I understand it". (L9)Ron Nichole September 13, 2004 10:09 AM This may be a stupid question but You should be protected against the DSO Exploit if you're patched. Leo February 17, 2005 8:29 PM No, and yes.
jim September 5, 2004 6:41 PM To fix this probelem please follow the steps below. Of course I had my suspicions because I knew that there is no such thing as an unbeatable piece of software. Once reported, our moderators will be notified and the post will be reviewed. Select 'security' tab.
- Track this discussion and email me when there are updates If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and
- I've got the DSO ones excluded myself but only that detection, I didn't exclude the whole product.
- These are the facts.
- You will see it has focused on an entry which is 1004 of the type "reg_sz", this should actually be a "reg_dword".
- You can e-mail or IM me and I will walk you through the process.
- Leo October 5, 2004 11:38 AM Get one (or more) of several good spyware scanners and run 'em.
Should I be concerned about how much space these updates will take? Thanks DJ Kinney September 14, 2004 6:11 AM All this advice hinges on the fact that staying up-to-date with patches will solves the problem. That is just MY choice and I am not suggesting to anyone to do the same or not to do the same. maureen November 26, 2004 11:47 PM Hi Leo; Tkx sooo much for your help with my question above - It gives me peace of mind to know that by doing the
Revisions8. Check This Out I suggest googling for a solution as it does require registry key editing to fix. John :-) September 9, 2004 11:31 PM Thanks Leo and Jim... What is DSO Exploit?
If it is set to REG_DWORD: Enter 3 into the Hexadecimal field. I have my windows updates turned on, so I should be up to date. Click here to Register a free account now! http://webtrekkie.com/dso-exploit/dso-exploit-spybot-adawarese-won-t-get-rid-of-it.php i bought a mac!
It hasn't worked for me. The confusion arises from a bug in Spybot Search and Destroy that continues to report the DSO Exploit problem, anyway. The first problem can be avoided by disabling the "Drag and drop or copy and paste files" option, but the new exploit doesn't rely on this particular bug Anne February 5,
Any error messages?
If you still want to make it so that you do not get these messages when running Spybot, the follow these directions: When you run Spybot you may receive these entries Question? Chris.g August 26, 2005 8:27 PM get someone help me get rid of this plz: Dialer:dialer.bjp No disinfected HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP\DOMAINS\ARCHIVIOSEX.NET Dialer:dialer.akd No disinfected HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP\DOMAINS\SGRUNT.BIZ . I appreciate your help in advance....Thanks, Linda Leo September 3, 2004 4:35 PM Depends on how it failed.
When I load my browser I am still getting about:blank as my browser's home page and a bunch of pop ups about spyware. But this really worked.I will us this all the time now. Do I have to update IE in order for SpyBot to stop reporting the DOS exploit. http://webtrekkie.com/dso-exploit/dso-exploit-hjt-log.php you must edit the regestry.
Even if you are up to date on your Microsoft Patches, like I am, programs like Spybot Search and Destroy will keep reporting it. With some of the same software (CCleaner, Windows Washer/SpySweeper, Reg Cleaner) Flag Permalink This was helpful (0) Collapse - Each time there's a new definitions for by Donna Buenaventura / August From my understanding, whether disabled or not, or if you have even deleted this entry, as long as you are patched there will be no adverse affect to your PC. But if you go to Major Geeks downloads, there in the spyware section there is a download that will fix it.
Stop posting patronising advice and just deal with it or go talk about something else. Scanner 188.8.131.52· EncryptedRegView 1.00· OpenChords 184.108.40.206· Temp Cleaner 1.2· SterJo Task Manager 2.8· MultiHasher 2.8.2· Easy Service Optimizer 1.2· AutoRun File Remover 4.0 1. When it was not disabled on unpatched PC's, it was possible for malicious code to be run on your PC without your consent. Please update your main program.Outdated.
Am I missing some simple command to show the entire location? HTML Encoder Decoder Free Address Finder Free Icons How Do I Find My Internal IP Address? It's that easy. That message happens when a program misbehaves, typically due to a bug in the program.
Sharon October 13, 2004 8:34 PM Hi, Leo, Thanks for the link, but 'wow,' they suggest a lot of updates. You may also be interested in: Spybot Search and Destroy Net Integration Forums - DSO Exploit reappears after fixing 89 Comments avathor July 25, 2004 5:18 PM Thanx for your help. Leo July 2, 2005 8:43 PM Definitely sounds like spyware. Thanks to all your information, I know I can safely ignore as I am up to date with all my updates etc.
You still have Internet Explorer on your machine, and it's used by certain applications, and is required for things like Windows Update. As long as the system is fully patched and the said issue (DSO exploit) is fixed already by MS, there's no need IMHO to allow Spybot S&D to scan/detect for it. Thierry July 2, 2005 9:46 AM i have spybot updated and there is nothong that removes the blue tool bar at the bottom of my screen, it appears every time i Just my personal opinion and settings Flag Permalink This was helpful (0) Collapse - Me too by juanabud / August 19, 2005 12:11 PM PDT In reply to: Disable Spybot S&D
Harborsidefx December 16, 2005 11:43 AM 1) Make a note of the location of the exploit shown in Spybot, something similar to: HKEY_USERS\S-1-5-21-1614895754-73586283-725345543-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3 2) Click on Start, Run, and type Then right-click in the right section and select the New Value option with a type of REG_DWORD. ImgBurn3. Visit our Support Forums for help or drop an email to mgnews @ majorgeeks.com to report mistakes.