DSO Exploit?

[Angry Arbalest]

When I run Spybot: S&D, I always find DSO Exploit listed. It is in red font, so it is supposedly bad. When I click "fix the problem", it says it deletes the problem. However, when I run Spybot: S&D again, it comes back. What can I do to get rid of it?

[shawners]

Have you tried on becoming one with the spyware?? Until you fully know your pc, the pc will be lost to you.

Install firefox, NEVER use IE again.. And always install apps that you download off a file sharing program rather then apps at on the net that contain 3rd party software.

[Angry Arbalest]

Okay. Anybody have anything else?

[silentscream]

yeah listen to shawners

lol

be careful what u install

check any third party software on google, if its malignent there will be sites saying so.

Greg

[Dark Messenger]

When I run Spybot: S&D, I always find DSO Exploit listed. It is in red font, so it is supposedly bad. When I click "fix the problem", it says it deletes the problem. However, when I run Spybot: S&D again, it comes back. What can I do to get rid of it?

Click "More Info" for further detailed information about the exploit in either spybot Search and destroy or Adaware and you should see something about deleting three or four registry keys which will stop it from reappearing when you do a scan with one of these two programs.

Its been a while since I did a scan with one of these two programs: Spybot or Adaware and I vaguely recall one of them giving this information when you click on more details under the description of the spyware in this case, 'Dso exploit'.

[Lehk]

try using hijack this to clean out the system and do as shawners says... except the filesharing part, apps from many filesharing networks contain various viruses and trojans. use as much Free software as possible. sourceforge.net and freshmeat are good places to go looking if you need free stuff without viruses, if you don't care about open source freewarehome has some nice free binaries

[Angry Arbalest]

Great. Thanks for the tips everyone.

[.:sp00ky:.]

What is DSO Exploit?

If you use Spybot Search and Destroy or another spyware removal tool, it may find an item called DSO Exploit. This exploit is a bug in Internet Explorer that under certain circumstances would allow untrusted software to run on the computer. In other words, its a hole in Internet Explorer that hackers could use to gain access to your system.

However, if you are running the latest version of Internet Explorer and have all your Windows Updates installed, the bug has been patched and is not a threat to your computer system. Even though Spybot may still show it as a threat.

How do I Remove DSO Exploit?

If you have the latest Internet Explorer version and all your Windows Updates, you can safely ignore the DSO Exploit as a potential problem when Spybot Search and Destroy or other spyware removal tools discover it. However if you would rather fix the exploit so it does not show up again, follow these steps to edit your Windows Registry. Please be careful however, incorrect changes to the Windows Registry can cause Windows to not boot.

1) Make a note of the location of the exploit shown in Spybot, something similar to:

HKEY_USERS\S-1-5-21-1614895754-73586283-725345543-500\Software\Microsoft\Windows\CurrentVersion\Inte rnet Settings\Zones\0\1004!=W=3

2) Click on Start, Run, and type REGEDIT and Press Enter to open the Windows Registry Editor

3) Find the location of the exploit above in the registry by clicking on the pluses(+) next to each title

4) After opening the Zones section and clicking on '0' look to the right window, under 'name' is the key '1004' and the type is REG_SZ simply right click and delete this REG_SZ value.Then right click and create new>DWORD Value, name it 1004, then right click on that and goto modify, give it the Hex Value of 3, Click ok.

If there is only a DWORD Value for the key (in this case 1004), then double click on the key and change the HEX value to 3 and click Ok.

5) Close the Registry Editor and Reboot your computer

6) The DSO Exploit should now be removed and it should no longer appear in the Spybot Search and Destroy log as a problem.



du de da da.


or simply put IE=bag 'o shite

:icon_rr:

[Angry Arbalest]

Wow, sounds like a plan. But I just deleted some of the keys and my computer is okay for the time being. Maybe I should have waited...

[silentscream]

its not like its painfull moving to firefox or even opera

i was doubtful for ages but i finaly got sick of ie

now i have firefox with (among others) the adblock extention which stops banner adds. which is nice.

the greatest extention imho is RIP (remove it permanently) it allows u to right click any part of a web page and remove it (my google home page has the text entry box and the search button and the uk and all radio buttons) u can just clear away clutter, its fantastic

Greg

[shawners]

Ive gotten more problems through what others put in their software on peoples internet homepage.. Rather then filesharing programs, no virus has ever been found in my BT client, usenet, winrar files. Long as your not on kazaa, grokster, ares, gnutella, you can be virus clean. Use regmechanic too, after you uninstall some of the spyware, you can make sure all your short cuts and things that are still left in the registry is gone.