DSO Exploit question.

[Guest]

Hi All,
I use Spybot Search & Destroy, & every time I run a scan, 5 DSO Exploits appear. I have not tried to remove them, as I have heard of others trying, but they soon reappear.
Can anyone tell me why these exploits appear on some Windows XP systems, & not on others? I am up to date with all updates, but can`t understand why others with similar setups don`t get them?

Many thanks in advance.

Ian.

 

[Carey Frisch [MVP]]

Basically what's happening is that Spybot is finding that the security setting
for "Download Unsigned ActiveX controls" for the (normally) hidden
"My Computer" zone in Internet Explorer is not set to disabled.

Visit http://forums.net-integration.net/index.php?showtopic=15308
for additional info.

Make sure you visit the Windows Update website and download any
recommended Critical Updates.

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

--------------------------------------------------------------------------------------------------------


| Hi All,
| I use Spybot Search & Destroy, & every time I run a scan, 5 DSO Exploits appear. I have not tried to remove
them, as I have heard of others trying, but they soon reappear.
| Can anyone tell me why these exploits appear on some Windows XP systems, & not on others? I am up to date
with all updates, but can`t understand why others with similar setups don`t get them?
|
| Many thanks in advance.
|
| Ian.

 

[Bruce Chambers]

Greetings --

It's probably a false alarm.

The DSO exploit was patched long ago by IE Cumulative Update
MS02-015, in March of 2002. If you've installed this specific patch,
or any subsequent IE Cumulative Updates, or Service Pack 1, you're
safe. It would appear that the latest version of Spybot S&D is only
checking for Internet zone settings in the registry that could be used
as work-around protection, and not for the presence of any corrective
patches. Hopefully, the makers of Spybot will soon fix this bug.

MS02-015 March 28, 2002 Cumulative Patch for Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;EN-US;319182

If you like, you can test your system for this particular
vulnerability at this web site:
http://www.greymagic.com/security/advisories/gm001-ie/

The makers of SpyBot S&D have acknowledged the problem and will
fix it on their next update:
http://www.safer-networking.org/index.php?page=paragraphs&detail=currentfaqs


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

Hi All,
I use Spybot Search & Destroy, & every time I run a scan, 5 DSO

Exploits appear. I have not tried to remove them, as I have heard of
others trying, but they soon reappear.

Can anyone tell me why these exploits appear on some Windows XP

systems, & not on others? I am up to date with all updates, but can`t
understand why others with similar setups don`t get them?