Re: After reading the posts about 'about:blank' I am so confused.

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: LuckyStrike (LS_at_smokedamagedfurniture.youcandriveitawaytoday.com)
Date: 07/01/04 

Date: Wed, 30 Jun 2004 23:58:26 -0600

NAV fix a DSO exploit? Not likely as that isn't it's province, BUT, I don't
use NAV so cannot say for sure. I've seen that DSO exploit before in Spybot
and it normally was able to fix it. If for some reason it cannot, try this:

Have "Search & Destroy" look for problems the usual way, then:
(1) highlight (by single left click) one of the "Data source object exploit"
items,
(2) Right click the highlighted item to bring up the menu list and select
"More details"
(3) Click "Jump to location"
(4) You should now be viewing the Registry and can use the path shown in the
Search & Destroy window to get to the key shown.

Export the Keys, and then Delete them in the registry. That should do the
trick.

If all else fails, try Spybot scan in Safe-Mode. Note: your Desktop icons
will probably change positions, so take a screenshot (if you don't have a
program which restores their locations) of where they are so you can
relocate them after you are finished. 

-- 
LuckyStrike
LS@smokedamagedfurniture.youcandriveitawaytoday.com
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
http://home.satx.rr.com/badour/html/post.html
--------------------------------------------------------------------
"Dave" <david.frickNOtoSPAM@homestore.com> wrote in message
news:upsTYrxXEHA.2388@TK2MSFTNGP11.phx.gbl...
> Thanks guys.
>
> I followed the instructions at
> http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch and basically did
the
> following to remove the about:"blank virus:"
>
> Ran CWShredder
> Ran HijackThis
> Ran Spybot 1.3
>
> "about:blank" is now gone. However, subsequently when I run a scan under
> Spybot, I get a report of malicious files:
>
>     DSO Exploit: Data source object exploit (Registry change, nothing
done)
>
> I run the fix under Spybot but when I scan again the files are still
there.
>
> Does anyone know what these files are?
>
>
<snipped...>

Relevant Pages

  • Re: CD-TRAY
    ... | The DSO exploit was patched long ago by IE Cumulative Update ... the makers of Spybot will soon fix this bug. ... | Ignore Products> Security> DSO Exploit, to turn off the false alarm. ...
    (microsoft.public.security.virus)
  • Re: Spybot DSO Exploit
    ... > Once you've done all the registry entries showing in SPYBot's DSO ... It would appear that the latest version of Spybot S&D is only ... checking for Internet zone settings in the registry that could be used ... the makers of Spybot will soon fix this bug. ...
    (microsoft.public.windowsxp.basics)
  • Re: After reading the posts about about:blank I am so confused.
    ... I got rid of the DSO Exploit by going into safemode and then Spybot gave me ... the same master search page with links to sleasy sites as before. ... Here is the message I get now when I run Spybot S&D: ... > and it normally was able to fix it. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: How to remove DSO Exploit spyware from the registry?
    ... but I can't seem to get rid of DSO Exploit. ... When I try to remove it after running a scan, Spybot says the ... the makers of SpyBot will soon fix ... Ignore Products> Security> DSO Exploit, to turn off the false alarm. ...
    (microsoft.public.windowsxp.general)
  • Re: IEXPLORE.exe has generated errors and will be closed by Windows
    ... If you have been installing updates for Windows and IE, you can have Spybot ... Do a google search for +spybot +dso +exploit. ... > My operating software is Windows 2000 Professional ...
    (microsoft.public.windows.inetexplorer.ie6.browser)