DSO Exploit

[Guest]

Just picked up tower from local shop after having Win XP Home w/SP2
installed. ZA Pro was re-insttaled by shop B4 going on line, AVG 7 was also
and each was running at start up. I get home and re-install ISP. I go online,
reconfig Outlook Exp. Download & install AdAware, Spybot S&D, CWShredder. Ran
CWShredder, no problem, Ran Adaware found one tracking cookie & removed, Ran
spybot & found DSO Exploit with five entries. I go to
www.greymagic.com/security/advisories/gm001-ie/ and found that that "The only
possible solution must come in the form of a patch from microsolft".
They have several links to sites claiming to be able to remove this DSO ***.
can you help me with this? Thank you.

 

[Jupiter Jones [MVP]]

The DSO exploit is a known false positive for SpyBot.
If you have the current updates, DSO is not a problem.

 

[David H. Lipman]

| Just picked up tower from local shop after having Win XP Home w/SP2
| installed. ZA Pro was re-insttaled by shop B4 going on line, AVG 7 was also
| and each was running at start up. I get home and re-install ISP. I go online,
| reconfig Outlook Exp. Download & install AdAware, Spybot S&D, CWShredder. Ran
| CWShredder, no problem, Ran Adaware found one tracking cookie & removed, Ran
| spybot & found DSO Exploit with five entries. I go to
| www.greymagic.com/security/advisories/gm001-ie/ and found that that "The only
| possible solution must come in the form of a patch from microsolft".
| They have several links to sites claiming to be able to remove this DSO ***.
| can you help me with this? Thank you.


Your Spybot S&D is out-of-date You need v1.3 and then update that version. The DSO Exploit
is a False Positive.

I will also assume Ad-aware is also out-of-date. The latest version is Ad-aware SE v1.05.

 

[Bruce Chambers]

Just picked up tower from local shop after having Win XP Home w/SP2
installed. ZA Pro was re-insttaled by shop B4 going on line, AVG 7 was also
and each was running at start up. I get home and re-install ISP. I go online,
reconfig Outlook Exp. Download & install AdAware, Spybot S&D, CWShredder. Ran
CWShredder, no problem, Ran Adaware found one tracking cookie & removed, Ran
spybot & found DSO Exploit with five entries. I go to
www.greymagic.com/security/advisories/gm001-ie/ and found that that "The only
possible solution must come in the form of a patch from microsolft".
They have several links to sites claiming to be able to remove this DSO ***.
can you help me with this? Thank you.

The DSO exploit was patched long ago by IE Cumulative Update
MS02-015, in March of 2002. If you've installed this specific patch,
or any subsequent IE Cumulative Updates, IE Service Pack 1, or WinXP
SP2, you're safe. It would appear that the latest version of SpyBot
S&D is only checking for Internet zone settings in the registry that
could be used as work-around protection, and not for the presence of
any corrective patches. Hopefully, the makers of SpyBot will soon fix
this bug.

MS02-015 March 28, 2002 Cumulative Patch for Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;EN-US;319182

If you like, you can test your system for this particular
vulnerability at this web site:
http://www.grey.com/security/advisories/gm001-ie/

The makers of SpyBot S&D have acknowledged the problem and will
fix it on their next update:
http://www.safer-networking.org/index.php?page=paragraphs&detail=currentfaqs

In the meantime, in SpyBot S&D, click Mode > Advanced > Settings >
Ignore Products > Security > DSO Exploit, to turn off the false alarm.

Some people have reported that the SpyBot Detection rules dated 30
Aug 04, or newer, when used with SpyBot S&D 1.3.1TX, will fix this
problem. However, I've had inconsistent results with that particular
detection update; sometimes it reads clean, then later it will once
again find the DSO problem, and then it will read clean again, all on
the same machine, with no other changes made.


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH