DSO Exploit

[Barry]

I use windows xp and have downloaded the service pack 2,
and also use zone alarm pro. Yet everyday when I run a
spybot search it finds a DSO expolit with 5 entries, which
it says gains entry through a security leak in Microsoft.
How can I prevent this exploit from gaining access to my
computer. Any help would be much appreciated

 

[Matthew]

This isn't a resolution, I'm just typing to let you know
that it happens to me too. I use Norton Internet Security
and my router is firewalled through the roof but it always
comes back with the same 5 exploits. I don't drop by here
too often so if you get e resoultion could you email me
plz..

Matthew

 

[NoNoBadDog!]

This is a known bug with the current version of S&D. You can safely ignore
the warnings...it has found registry entries that have nothing to do with
DSO exploit. Besides, if you installed SP2, the DSO exploit will not
function anyway.

Bobby

 

[Guest]

lots of ppl asking about this.what i have found is there
is a new version of spybot (1.3.1)coming soon if not
already.it should solve the DSO exploit issue.fingers
crossed check it out:
www.spybot.info

 

[Bruce Chambers]

Greetings --

The DSO exploit was patched long ago by IE Cumulative Update
MS02-015, in March of 2002. If you've installed this specific patch,
or any subsequent IE Cumulative Updates, or Service Pack 1, you're
safe. It would appear that the latest version of Spybot S&D is only
checking for Internet zone settings in the registry that could be used
as work-around protection, and not for the presence of any corrective
patches. Hopefully, the makers of Spybot will soon fix this bug.

MS02-015 March 28, 2002 Cumulative Patch for Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;EN-US;319182

If you like, you can test your system for this particular
vulnerability at this web site:
http://www.greymagic.com/security/advisories/gm001-ie/

The makers of SpyBot S&D have acknowledged the problem and will
fix it on their next update:
http://www.safer-networking.org/index.php?page=paragraphs&detail=currentfaqs

In the meantime, in SpyBot S&D, click Mode > Advanced > Settings >
Ignore Products > Security > DSO Exploit, to turn off the false alarm.


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH