Re: How to remove DSO Exploit spyware from the registry?
From: Bruce Chambers (bruce_a_chambers_at_h0tmail.com)
Date: 12/08/04
- Next message: cquirke (MVP Win9x): "Re: XP Home requires activation after restart"
- Previous message: michaelaknight_at_gmail.com: "Re: Restart PC without lossing phone network connection"
- In reply to: Seraph: "How to remove DSO Exploit spyware from the registry?"
- Next in thread: Kelly: "Re: How to remove DSO Exploit spyware from the registry?"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 07 Dec 2004 19:45:12 -0700
Seraph wrote:
> Hi everybody, I used a couple of spyware removal programs (all latest
> versions with updated definitions), such as Ad-Aware, Spy Sweeper and Spybot:
> S&D, but I can't seem to get rid of DSO Exploit. And its only Spybot that
> detects it. When I try to remove it after running a scan, Spybot says the
> problem is fixed, but when I run another scan it detects it again, even
> though I haven't been on the Net again. Also, when I open Internet Explorer,
> another window taking me to another site pops up which I also can't get rid
> of, even after resetting IE's default settings. Can anybody please help
The DSO exploit was patched long ago by IE Cumulative Update
MS02-015, in March of 2002. If you've installed this specific patch,
or any subsequent IE Cumulative Updates, IE Service Pack 1, or WinXP
SP2, you're safe. It would appear that the latest version of SpyBot
S&D is only checking for Internet zone settings in the registry that
could be used as work-around protection, and not for the presence of
any corrective patches. Hopefully, the makers of SpyBot will soon fix
this bug.
MS02-015 March 28, 2002 Cumulative Patch for Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;EN-US;319182
If you like, you can test your system for this particular
vulnerability at this web site:
http://www.grey.com/security/advisories/gm001-ie/
The makers of SpyBot S&D have acknowledged the problem and will
fix it on their next update:
http://www.safer-networking.org/index.php?page=paragraphs&detail=currentfaqs
In the meantime, in SpyBot S&D, click Mode > Advanced > Settings >
Ignore Products > Security > DSO Exploit, to turn off the false alarm.
Some people have reported that the SpyBot Detection rules dated 30
Aug 04, or newer, when used with SpyBot S&D 1.3, will fix this
problem. However, I've had inconsistent results with that particular
detection update; sometimes it reads clean, then later it will once
again find the DSO problem, and then it will read clean again, all on
the same machine, with no other changes made.
-- Bruce Chambers Help us help you: http://dts-l.org/goodpost.htm http://www.catb.org/~esr/faqs/smart-questions.html You can have peace. Or you can have freedom. Don't ever count on having both at once. - RAH
- Next message: cquirke (MVP Win9x): "Re: XP Home requires activation after restart"
- Previous message: michaelaknight_at_gmail.com: "Re: Restart PC without lossing phone network connection"
- In reply to: Seraph: "How to remove DSO Exploit spyware from the registry?"
- Next in thread: Kelly: "Re: How to remove DSO Exploit spyware from the registry?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
