DSO Exploit

I have recently installed "Sypbot S&D" and it keeps
finding a spyware called DSO Exploit that effects your
registry. I deleted it once and again it came back. As I
am a novice of registry, I hesitate to keep deleting it---
any advise?

Could be it's hiding in System Restore.
Turn off System Restore and run the fixes again.

How to Turn On and Turn Off System Restore in Windows XP
http://support.microsoft.com/defaul...5&Product=winxp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-----------------------------------------------------------------------------------

"Alice" <anonymous@discussions.microsoft.com> wrote in message:
news:1daf501c45460$16efbba0$a101280a@phx.gbl...

|I have recently installed "Sypbot S&D" and it keeps
| finding a spyware called DSO Exploit that effects your
| registry. I deleted it once and again it came back. As I
| am a novice of registry, I hesitate to keep deleting it---
| any advise?

Greetings --

That particular exploit was patched by an IE Cumulative Update
MS02-015, in March of 2002. If you've installed this specific patch,
or any subsequent IE Cumulative Updates, or Service Pack 1, you're
safe. It would appear that the latest version of Spybot S&D is only
checking for Internet zone settings in the registry that could be used
as work-around protection, and not for the presence of any corrective
patches. Hopefully, the makers of Spybot will soon fix this bug.

MS02-015 March 28, 2002 Cumulative Patch for Internet Explorer
http://support.microsoft.com/defaul...kb;EN-US;319182

If you like, you can test your system for this particular
vulnerability at this web site:
http://www.greymagic.com/security/advisories/gm001-ie/


Bruce Chambers
--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH


"Alice" <anonymous@discussions.microsoft.com> wrote in message
news:1daf501c45460$16efbba0$a101280a@phx.gbl...
> I have recently installed "Sypbot S&D" and it keeps
> finding a spyware called DSO Exploit that effects your
> registry. I deleted it once and again it came back. As I
> am a novice of registry, I hesitate to keep deleting it---
> any advise?

thank You.I read the article you pointed out to me and if
I understand it corectly, If I turn off the system restore
(just uncheck the box) ALL my previous restore points will
be removed!! Is there a way to just temp turn off and
save all the old ones in case I want to restore back to an
earlier time if I continue to have problems?

>-----Original Message-----
>Could be it's hiding in System Restore.
>Turn off System Restore and run the fixes again.
>
>How to Turn On and Turn Off System Restore in Windows XP
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;310405&Product=winxp
>
>--
>Carey Frisch
>Microsoft MVP
>Windows XP - Shell/User
>
>Be Smart! Protect your PC!
>http://www.microsoft.com/security/protect/
>
>----------------------------------------------------------
-------------------------
>
>"Alice" <anonymous@discussions.microsoft.com> wrote in
message:
> news:1daf501c45460$16efbba0$a101280a@phx.gbl...
>
>|I have recently installed "Sypbot S&D" and it keeps
>| finding a spyware called DSO Exploit that effects your
>| registry. I deleted it once and again it came back.
As I
>| am a novice of registry, I hesitate to keep deleting it-
--
>| any advise?
>.
>

Thank You.....I have always installed any and all patches
from windows as soon as available..thank you. I went to
spybot site says they are aware of the issue and will
correct on the next update. Have I harmed anything since
I deleted the registry items already once? After the line
that detected the spyware it say (nothing done)-does this
mean there has been no harm done and I should not have
deleted the file?

>-----Original Message-----
>Greetings --
>
> That particular exploit was patched by an IE
Cumulative Update
>MS02-015, in March of 2002. If you've installed this
specific patch,
>or any subsequent IE Cumulative Updates, or Service Pack
1, you're
>safe. It would appear that the latest version of Spybot
S&D is only
>checking for Internet zone settings in the registry that
could be used
>as work-around protection, and not for the presence of
any corrective
>patches. Hopefully, the makers of Spybot will soon fix
this bug.
>
> MS02-015 March 28, 2002 Cumulative Patch for Internet
Explorer
>http://support.microsoft.com/default.aspx?scid=kb;EN-
US;319182
>
> If you like, you can test your system for this
particular
>vulnerability at this web site:
>http://www.greymagic.com/security/advisories/gm001-ie/
>
>
>Bruce Chambers
>--
>Help us help you:
>http://dts-l.org/goodpost.htm
>http://www.catb.org/~esr/faqs/smart-questions.html
>
>You can have peace. Or you can have freedom. Don't ever
count on
>having both at once. - RAH
>
>
>"Alice" <anonymous@discussions.microsoft.com> wrote in
message
>news:1daf501c45460$16efbba0$a101280a@phx.gbl...
>> I have recently installed "Sypbot S&D" and it keeps
>> finding a spyware called DSO Exploit that effects your
>> registry. I deleted it once and again it came back.
As I
>> am a novice of registry, I hesitate to keep deleting it-
--
>> any advise?
>
>
>.
>

If you restore the computer with System Restore, you also restore the
exploits.
Turning off System Restore deletes all Restore Points.
There is no way to "temp turn off and save all the old ones".

--
Jupiter Jones [MVP]
http://www3.telus.net/dandemar/


<anonymous@discussions.microsoft.com> wrote in message
news:1dced01c4546f$f6c7d190$a401280a@phx.gbl...
> thank You.I read the article you pointed out to me and if
> I understand it corectly, If I turn off the system restore
> (just uncheck the box) ALL my previous restore points will
> be removed!! Is there a way to just temp turn off and
> save all the old ones in case I want to restore back to an
> earlier time if I continue to have problems?
>
> >-----Original Message-----
> >Could be it's hiding in System Restore.
> >Turn off System Restore and run the fixes again.
> >
> >How to Turn On and Turn Off System Restore in Windows XP
> >http://support.microsoft.com/default.aspx?scid=kb;en-
> us;310405&Product=winxp
> >
> >--
> >Carey Frisch
> >Microsoft MVP
> >Windows XP - Shell/User
> >
> >Be Smart! Protect your PC!
> >http://www.microsoft.com/security/protect/
> >
> >----------------------------------------------------------
> -------------------------
> >
> >"Alice" <anonymous@discussions.microsoft.com> wrote in
> message:
> > news:1daf501c45460$16efbba0$a101280a@phx.gbl...
> >
> >|I have recently installed "Sypbot S&D" and it keeps
> >| finding a spyware called DSO Exploit that effects your
> >| registry. I deleted it once and again it came back.
> As I
> >| am a novice of registry, I hesitate to keep deleting it-
> --
> >| any advise?
> >.
> >

Greetings --

If IE is still working properly, you may not have hurt anything.
If you're worried, however, you could use a restore point to return
the registry to it's pre-deletion state.

Bruce Chambers
--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH


"Old Bob" <anonymous@discussions.microsoft.com> wrote in message
news:1dd0801c45472$02c97aa0$a401280a@phx.gbl...
> Thank You.....I have always installed any and all patches
> from windows as soon as available..thank you. I went to
> spybot site says they are aware of the issue and will
> correct on the next update. Have I harmed anything since
> I deleted the registry items already once? After the line
> that detected the spyware it say (nothing done)-does this
> mean there has been no harm done and I should not have
> deleted the file?
>