PC Review Forums Newsgroups Microsoft AntiSpyware Spyware Discussion Cannot Remove DSO EXPLOIT found by Spybot

Reply

Cannot Remove DSO EXPLOIT found by Spybot

 
Thread Tools Rate Thread
Old 23-01-2005, 02:19 PM   #1
Linda M
Guest
 
Posts: n/a
Default Cannot Remove DSO EXPLOIT found by Spybot


I have tried trend, mcafee, spybot, adaware and microsoft
beta. Only Spybot found DSO Exploit. (The others find no
trojans/spyware/virus.) DSO Exploit has been on my
computer for 6 months and nothing works to remove it.

I'd so appreciate it if anybody could tell me if this is
something to worry about and if so, what I can do about
it.
Thanks so much.
Linda.


Here is the log from the latest Spybot scan:

Error during check!: Z-Demon (Ungültiger Datentyp für '')
()


DSO Exploit: Data source object exploit (Registry change,
fixed)
HKEY_USERS\S-1-5-18
\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change,
fixed)
HKEY_USERS\S-1-5-21-3653502098-1492241007-756352252-1006
\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change,
fixed)
HKEY_USERS\S-1-5-20
\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change,
fixed)
HKEY_USERS\S-1-5-19
\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change,
fixed)

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVers
ion\Internet Settings\Zones\0\1004!=W=3


--- Spybot - Search && Destroy version: 1.3 ---
2004-11-29 Includes\Cookies.sbi
2005-01-04 Includes\Dialer.sbi
2005-01-04 Includes\Hijackers.sbi
2004-12-29 Includes\Keyloggers.sbi
2004-05-12 Includes\LSP.sbi
2005-01-04 Includes\Malware.sbi
2004-11-29 Includes\Revision.sbi
2004-11-29 Includes\Security.sbi
2005-01-05 Includes\Spybots.sbi
2004-11-29 Includes\Tracks.uti
2005-01-04 Includes\Trojans.sbi

  Reply With Quote
Old 23-01-2005, 03:04 PM   #2
Kaspars
Guest
 
Posts: n/a
Default Cannot Remove DSO EXPLOIT found by Spybot

Hi, Linda!
Well known Spybot S&D false positive
http://www.safer-networking.org/en/faq/36.html
Already fixed in ver. 1.3.1TX sorry - no link
Regards - Kaspars
>-----Original Message-----
>I have tried trend, mcafee, spybot, adaware and

microsoft
>beta. Only Spybot found DSO Exploit. (The others find

no
>trojans/spyware/virus.) DSO Exploit has been on my
>computer for 6 months and nothing works to remove it.
>
>I'd so appreciate it if anybody could tell me if this is
>something to worry about and if so, what I can do about
>it.
>Thanks so much.
>Linda.
>
>
>Here is the log from the latest Spybot scan:
>
>Error during check!: Z-Demon (Ungültiger Datentyp

für '')
>()
>
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
> HKEY_USERS\S-1-5-18
>\Software\Microsoft\Windows\CurrentVersion\Internet
>Settings\Zones\0\1004!=W=3
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
> HKEY_USERS\S-1-5-21-3653502098-1492241007-756352252-

1006
>\Software\Microsoft\Windows\CurrentVersion\Internet
>Settings\Zones\0\1004!=W=3
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
> HKEY_USERS\S-1-5-20
>\Software\Microsoft\Windows\CurrentVersion\Internet
>Settings\Zones\0\1004!=W=3
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
> HKEY_USERS\S-1-5-19
>\Software\Microsoft\Windows\CurrentVersion\Internet
>Settings\Zones\0\1004!=W=3
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
>
>HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVer

s
>ion\Internet Settings\Zones\0\1004!=W=3
>
>
>--- Spybot - Search && Destroy version: 1.3 ---
>2004-11-29 Includes\Cookies.sbi
>2005-01-04 Includes\Dialer.sbi
>2005-01-04 Includes\Hijackers.sbi
>2004-12-29 Includes\Keyloggers.sbi
>2004-05-12 Includes\LSP.sbi
>2005-01-04 Includes\Malware.sbi
>2004-11-29 Includes\Revision.sbi
>2004-11-29 Includes\Security.sbi
>2005-01-05 Includes\Spybots.sbi
>2004-11-29 Includes\Tracks.uti
>2005-01-04 Includes\Trojans.sbi
>
>.
>

  Reply With Quote
Old 23-01-2005, 04:39 PM   #3
Danny Kile
Guest
 
Posts: n/a
Default Re: Cannot Remove DSO EXPLOIT found by Spybot

Linda M wrote:

> I have tried trend, mcafee, spybot, adaware and microsoft
> beta. Only Spybot found DSO Exploit. (The others find no
> trojans/spyware/virus.) DSO Exploit has been on my
> computer for 6 months and nothing works to remove it.
>
> I'd so appreciate it if anybody could tell me if this is
> something to worry about and if so, what I can do about
> it.
> Thanks so much.
> Linda.
>

<snippit>

check the following is out it corrected it for me.

http://pchell.com/support/dsoexploit.shtml


Danny
  Reply With Quote
Old 23-01-2005, 08:02 PM   #4
Bill Sanderson
Guest
 
Posts: n/a
Default Re: Cannot Remove DSO EXPLOIT found by Spybot

FWIW, I agree with Kaspars--this is a false reading on the part of Spybot
Search & destroy. As long as you are on xpsp2, and are fully patched, there
is nothing to worry about in this message. It is already fixed in betas of
a newer release of Spybot search & destroy.

"Linda M" <anonymous@discussions.microsoft.com> wrote in message
news:1a9c01c50156$9dce10b0$a401280a@phx.gbl...
I have tried trend, mcafee, spybot, adaware and microsoft
beta. Only Spybot found DSO Exploit. (The others find no
trojans/spyware/virus.) DSO Exploit has been on my
computer for 6 months and nothing works to remove it.

I'd so appreciate it if anybody could tell me if this is
something to worry about and if so, what I can do about
it.
Thanks so much.
Linda.


Here is the log from the latest Spybot scan:

Error during check!: Z-Demon (Ungültiger Datentyp für '')
()


DSO Exploit: Data source object exploit (Registry change,
fixed)
HKEY_USERS\S-1-5-18
\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change,
fixed)
HKEY_USERS\S-1-5-21-3653502098-1492241007-756352252-1006
\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change,
fixed)
HKEY_USERS\S-1-5-20
\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change,
fixed)
HKEY_USERS\S-1-5-19
\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change,
fixed)

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVers
ion\Internet Settings\Zones\0\1004!=W=3


--- Spybot - Search && Destroy version: 1.3 ---
2004-11-29 Includes\Cookies.sbi
2005-01-04 Includes\Dialer.sbi
2005-01-04 Includes\Hijackers.sbi
2004-12-29 Includes\Keyloggers.sbi
2004-05-12 Includes\LSP.sbi
2005-01-04 Includes\Malware.sbi
2004-11-29 Includes\Revision.sbi
2004-11-29 Includes\Security.sbi
2005-01-05 Includes\Spybots.sbi
2004-11-29 Includes\Tracks.uti
2005-01-04 Includes\Trojans.sbi


  Reply With Quote
Old 23-01-2005, 09:09 PM   #5
Guest
 
Posts: n/a
Default Cannot Remove DSO EXPLOIT found by Spybot


>-----Original Message-----
>I have tried trend, mcafee, spybot, adaware and

microsoft
>beta. Only Spybot found DSO Exploit. (The others find

no
>trojans/spyware/virus.) DSO Exploit has been on my
>computer for 6 months and nothing works to remove it.
>
>I'd so appreciate it if anybody could tell me if this is
>something to worry about and if so, what I can do about
>it.
>Thanks so much.
>Linda.
>

I had the same problem. Searching for infomation on
DSO Exploit seems to say that this is a potential
security leak and not really spyware. I just told the
program to ignore DSO Exploit. I presume that this will
be resolved in Beta 2 (or whatever).
>
>Here is the log from the latest Spybot scan:
>
>Error during check!: Z-Demon (Ungültiger Datentyp

für '')
>()
>
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
> HKEY_USERS\S-1-5-18
>\Software\Microsoft\Windows\CurrentVersion\Internet
>Settings\Zones\0\1004!=W=3
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
> HKEY_USERS\S-1-5-21-3653502098-1492241007-756352252-

1006
>\Software\Microsoft\Windows\CurrentVersion\Internet
>Settings\Zones\0\1004!=W=3
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
> HKEY_USERS\S-1-5-20
>\Software\Microsoft\Windows\CurrentVersion\Internet
>Settings\Zones\0\1004!=W=3
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
> HKEY_USERS\S-1-5-19
>\Software\Microsoft\Windows\CurrentVersion\Internet
>Settings\Zones\0\1004!=W=3
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
>
>HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVer

s
>ion\Internet Settings\Zones\0\1004!=W=3
>
>
>--- Spybot - Search && Destroy version: 1.3 ---
>2004-11-29 Includes\Cookies.sbi
>2005-01-04 Includes\Dialer.sbi
>2005-01-04 Includes\Hijackers.sbi
>2004-12-29 Includes\Keyloggers.sbi
>2004-05-12 Includes\LSP.sbi
>2005-01-04 Includes\Malware.sbi
>2004-11-29 Includes\Revision.sbi
>2004-11-29 Includes\Security.sbi
>2005-01-05 Includes\Spybots.sbi
>2004-11-29 Includes\Tracks.uti
>2005-01-04 Includes\Trojans.sbi
>
>.
>

  Reply With Quote
Old 24-01-2005, 12:44 AM   #6
Mike
Guest
 
Posts: n/a
Default Cannot Remove DSO EXPLOIT found by Spybot

There is a software error in Spybot that prevents it
fromm fully removing DSO,it changes it but doesnt
remove.There is a software upgrade to fix this
problem.You can find it at Major Geeks.com
>-----Original Message-----
>I have tried trend, mcafee, spybot, adaware and

microsoft
>beta. Only Spybot found DSO Exploit. (The others find

no
>trojans/spyware/virus.) DSO Exploit has been on my
>computer for 6 months and nothing works to remove it.
>
>I'd so appreciate it if anybody could tell me if this is
>something to worry about and if so, what I can do about
>it.
>Thanks so much.
>Linda.
>
>
>Here is the log from the latest Spybot scan:
>
>Error during check!: Z-Demon (Ungültiger Datentyp

für '')
>()
>
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
> HKEY_USERS\S-1-5-18
>\Software\Microsoft\Windows\CurrentVersion\Internet
>Settings\Zones\0\1004!=W=3
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
> HKEY_USERS\S-1-5-21-3653502098-1492241007-756352252-

1006
>\Software\Microsoft\Windows\CurrentVersion\Internet
>Settings\Zones\0\1004!=W=3
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
> HKEY_USERS\S-1-5-20
>\Software\Microsoft\Windows\CurrentVersion\Internet
>Settings\Zones\0\1004!=W=3
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
> HKEY_USERS\S-1-5-19
>\Software\Microsoft\Windows\CurrentVersion\Internet
>Settings\Zones\0\1004!=W=3
>
>DSO Exploit: Data source object exploit (Registry

change,
>fixed)
>
>HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVer

s
>ion\Internet Settings\Zones\0\1004!=W=3
>
>
>--- Spybot - Search && Destroy version: 1.3 ---
>2004-11-29 Includes\Cookies.sbi
>2005-01-04 Includes\Dialer.sbi
>2005-01-04 Includes\Hijackers.sbi
>2004-12-29 Includes\Keyloggers.sbi
>2004-05-12 Includes\LSP.sbi
>2005-01-04 Includes\Malware.sbi
>2004-11-29 Includes\Revision.sbi
>2004-11-29 Includes\Security.sbi
>2005-01-05 Includes\Spybots.sbi
>2004-11-29 Includes\Tracks.uti
>2005-01-04 Includes\Trojans.sbi
>
>.
>

  Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off