Spybot-S&D fixes a DSO Exploit but it returns

S

skydiver

Spybot-S&D finds a DSO Exploit but it returns...

That tells it all, almost...

Spybot-S&D found a DSO Exploit consisting of 5 registry entries in
HKeyUsers, fixed them, but they reappear on subsequent scans.

On the first attempt, there was a popup message saying that "something"
hadn't started correctly (an .exe file, I believe) and reinstalling the
application might help. It disappeared quickly and hasn't returned, so
there's no way to investigate further.

I would provide a copy of the DSO Exploit details herein, but can't obtain
that info from Spybot-S&D easily. The Spybot-S&D Recovery operation displays
a long list of registry entries involved but provides no way to copy or
access it directly that I can discover. I could re-type it manually, but
that would be very tedious and take a long time.

Any suggestions?
 
M

me

Spybot-S&D finds a DSO Exploit but it returns...

That tells it all, almost...

Spybot-S&D found a DSO Exploit consisting of 5 registry
entries in HKeyUsers, fixed them, but they reappear on
subsequent scans.

On the first attempt, there was a popup message saying that
"something" hadn't started correctly (an .exe file, I
believe) and reinstalling the application might help. It
disappeared quickly and hasn't returned, so there's no way
to investigate further.

I would provide a copy of the DSO Exploit details herein,
but can't obtain that info from Spybot-S&D easily. The
Spybot-S&D Recovery operation displays a long list of
registry entries involved but provides no way to copy or
access it directly that I can discover. I could re-type it
manually, but that would be very tedious and take a long
time.

Any suggestions?
Try Textgrabber copies text from "non-copyable" windows (not
100% but better 'n nothing).
http://dl.winsite.com/files/263/ar2/win95/misc/textgrabber_v10.z
ip

J
 
M

Martin

skydiver said:
Spybot-S&D finds a DSO Exploit but it returns...

That tells it all, almost...

Spybot-S&D found a DSO Exploit consisting of 5 registry entries in
HKeyUsers, fixed them, but they reappear on subsequent scans.

On the first attempt, there was a popup message saying that "something"
hadn't started correctly (an .exe file, I believe) and reinstalling the
application might help. It disappeared quickly and hasn't returned, so
there's no way to investigate further.

I would provide a copy of the DSO Exploit details herein, but can't obtain
that info from Spybot-S&D easily. The Spybot-S&D Recovery operation
displays a long list of registry entries involved but provides no way to
copy or access it directly that I can discover. I could re-type it
manually, but that would be very tedious and take a long time.

Any suggestions?

Update Spybot S & D - this is a common problem with Spybot, has been
mentioned in this NG before so try a Google..
 
S

skydiver

Martin said:
Update Spybot S & D - this is a common problem with Spybot, has been
mentioned in this NG before so try a Google..

I already have version 1.3 and the latest internal updates. I see from their
website that everything is a "beta" and three different versions of the 1.3
beta were released, but have no way of knowing which one I have. How would I
tell? My downloaded setup file spybotxd13.exe was 4.15 MB (4,354,084 bytes).
So do I have the latest version?
 
H

History Fan

I recently formatted my hard drive and reinstalled Spybot 1.3. I was
hoping perhaps Spybot had released an updated version of 1.3 that fixed the
DSO glitch. I went to majorgeeks.com, which normally has the latest
versions of these programs, and downloaded it from there. But the DSO
glitch remains. A tech from Spybot recently told me the 1.3.1 TX patch was
a beta and had bugs, hence the reason it was no longer listed on their site.
However, majorgeeks is still offering it. The patch worked for me in the
past. However, I think I'll wait for the final version of 1.4, which is
long overdue.
 
S

skydiver

skydiver said:
Thanks for the tip. I've downloaded and am trying it, but can't get it to
work. Maybe I don't understand how. There are not enough instructions. Can
you walk me through the procedure? Thanks.

I figured it out...
It just wasn't working on the windows I tried.
It doesn't work on the Spybot recovery window.
However it works fine on Windows Explorer windows, for example, to capture a
text copy of file lists. That should be useful. It's also an easier way to
copy text from large windows.
 
H

History Fan

Why not?
It's probably as good as any other.
Hey... they're ALL betas!!!!!!
Perpetual betas, one after another...
Never any final versions.
--

Are you sure about that? Seems rather strange.
 
M

me

I figured it out...
It just wasn't working on the windows I tried.
It doesn't work on the Spybot recovery window.
However it works fine on Windows Explorer windows, for
example, to capture a text copy of file lists. That should
be useful. It's also an easier way to copy text from large
windows.

Yeah, that's the "not 100%."
FWIW, the word "window" as used in Textgrabber's description
(hint) is not the window most ppl think of as they use windoze.

Try this: open, e.g., Notepad and click Help|About.
Shift+Ctrl r-click on the empty space inside the "About Notepad"
box (at the left side), ditto on some _text(s)_, ditto on the
"OK" button and observe that Textgrabber copies.

J
 
M

Martin

History Fan said:
Are you sure about that? Seems rather strange.


The TX patch (and it is a patch - you still need the full install of 1.3 for
it to work) solves the DSO problem - seems to work fine for me, no glitches,
no other problems. Scans fine now, no DSO Exploit problems, gets rid of
everything it finds OK... I just could never remember where I downloaded
the patch from!!! (hence my reference to search Google).....
 
S

skydiver

Luke said:
Spybot-S&D finds a DSO Exploit but it returns... [snip]
Any suggestions?

It's a known bug. Just add the DSO Exploit to ignorde products and
forget about it.

That's the best suggestion I've heard. I just wonder if my attempts to fix
the bogus DSO exploit caused any harm to my computer. The different versions
and patches for Spybot are a nightmare.
 
L

Luke

Luke said:
Spybot-S&D finds a DSO Exploit but it returns... [snip]
Any suggestions?

It's a known bug. Just add the DSO Exploit to ignorde products and
forget about it.

That's the best suggestion I've heard.

You're welcome. It's not original with me, however :).
I just wonder if my attempts to fix
the bogus DSO exploit caused any harm to my computer. The different versions
and patches for Spybot are a nightmare.

I haven't kept track of everything you did, but probably no harm done.
If in doubt try to remove everything and reinstall S&D 1.3 "beta" ;-).
Luck!
 
H

History Fan

Look at the list of updates/changes in Spybot listed on their website.
http://www.spybot.info/en/versionhistory/index.html#Uzbek
Almost nothing but betas listed. Seldom a final version. None of the 1.3
versions are a final version, all are betas. The latest final version
listed is 1.1 final (10/12/02)!
--

Weird. Never seen a program listing like that. Irregardless, I'm
going to wait until Spybot 1.4 is widely available throughout the Internet
before trying it out. I'm referring to sites like majorgeeks, cnet and
pcworld. Right now all three are still offering version 1.3.
 
N

Netuser 58

skydiver said:
Spybot-S&D finds a DSO Exploit but it returns...

That tells it all, almost...

Spybot-S&D found a DSO Exploit consisting of 5 registry entries in
HKeyUsers, fixed them, but they reappear on subsequent scans.

On the first attempt, there was a popup message saying that "something"
hadn't started correctly (an .exe file, I believe) and reinstalling the
application might help. It disappeared quickly and hasn't returned, so
there's no way to investigate further.

I would provide a copy of the DSO Exploit details herein, but can't obtain
that info from Spybot-S&D easily. The Spybot-S&D Recovery operation displays
a long list of registry entries involved but provides no way to copy or
access it directly that I can discover. I could re-type it manually, but
that would be very tedious and take a long time.

Any suggestions?


Go here and read this about DSO Exploits:
http://www.pchell.com/support/dsoexploit.shtml

Netuser 58
 
N

Netuser 58

skydiver said:
Thanks. That clears everything up! So I can safely ignore it, because "DSO
exploit" has been patched (is not a risk) with the current updated IE. My
only concern is whether Spybot's attempts to fix it caused any harm to my
computer(?).

I wouldn't think so. I had five DSO's also, so I went into my regisrty
to the locations indicated and changed the value key back to the proper
DWORD value key (it had been changed to a String value key which is
wrong). That fixed all the DSO readings. I'm glad Spybot detects them.

Netuser 58
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top