DSO Exploit

[donald zielkowski]

Have 5 instances of DSO Exploit showing up in my
registry, when I use spybot. Has Microsoft issued a
patch for this problem? Feel that personal information
has been compromised on this pc. Not certain how, but
someone has obtained and tried to use my credit card
number to make unauthorized purchases. Would appreciate
any info on this spyware.

 

[JAX]

Hi Donald,

That is a known issue with Spybot S&D. They are working on a fix for it. It
will not harm your machine, just ignore those entries. You can find the same
information with a Google search to confirm, if you wish.

HTH, JAX

 

[Bruce Chambers]

Greetings --

Are you, by any chance, asking about a problem being reported by
the latest version of Spybot S&D?

The DSO exploit was patched long ago by IE Cumulative Update
MS02-015, in March of 2002. If you've installed this specific patch,
or any subsequent IE Cumulative Updates, or Service Pack 1, you're
safe. It would appear that the latest version of Spybot S&D is only
checking for Internet zone settings in the registry that could be used
as work-around protection, and not for the presence of any corrective
patches. Hopefully, the makers of Spybot will soon fix this bug.

MS02-015 March 28, 2002 Cumulative Patch for Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;EN-US;319182

If you like, you can test your system for this particular
vulnerability at this web site:
http://www.greymagic.com/security/advisories/gm001-ie/

The makers of SpyBot S&D have acknowledged the problem and will
fix it on their next update:
http://www.safer-networking.org/index.php?page=paragraphs&detail=currentfaqs

In the meantime, in SpyBot S&D, click Mode > Advanced > Settings >
Ignore Products > Security > DSO Exploit, to turn off the false alarm.


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH