dso exploit

[Guest]

i have ben scanning my computer for viruses using norton anti virus, spybot
and ad-aware. everything seems fine until i use spybot which tells me i have
a cookie tracker called dso exploit causing problems on my pc. spybot says
it has destroyed dso but if i scan again its still there!

any help would be great cheers, thanks in advance!

 

[Gary Burton]

That's an old and former problem that has been fixed in Internet
Explorer. Spybot is just taking its time in fixing or removing the
detection algorythm. Don't worry about it. The same thing happens on my
machine.

 

[RC]

You can go to Settings and then Ignore Products and check the box next to
DSO Exploit and it won't
show up again

 

[Patti MacLeod]

Hi cy,

It sounds like you may need to d/load and run the Spybot - Search and
Destroy DSO Exploit Fix 1.3.1, available here:
http://www.majorgeeks.com/download4392.html



Regards,

 

[Bruce Chambers]

i have ben scanning my computer for viruses using norton anti virus, spybot
and ad-aware. everything seems fine until i use spybot which tells me i have
a cookie tracker called dso exploit causing problems on my pc. spybot says
it has destroyed dso but if i scan again its still there!

any help would be great cheers, thanks in advance!

The DSO exploit was patched long ago by IE Cumulative Update
MS02-015, in March of 2002. If you've installed this specific patch,
or any subsequent IE Cumulative Updates, IE Service Pack 1, or WinXP
SP2, you're safe. It would appear that the latest version of SpyBot
S&D is only checking for Internet zone settings in the registry that
could be used as work-around protection, and not for the presence of
any corrective patches. Hopefully, the makers of SpyBot will soon fix
this bug.

MS02-015 March 28, 2002 Cumulative Patch for Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;EN-US;319182

If you like, you can test your system for this particular
vulnerability at this web site:
http://www.grey.com/security/advisories/gm001-ie/

The makers of SpyBot S&D have acknowledged the problem and will
fix it on their next update:
http://www.safer-networking.org/index.php?page=paragraphs&detail=currentfaqs

In the meantime, in SpyBot S&D, click Mode > Advanced > Settings >
Ignore Products > Security > DSO Exploit, to turn off the false alarm.

Some people have reported that the SpyBot Detection rules dated 30
Aug 04, or newer, when used with SpyBot S&D 1.3.1TX, will fix this
problem. However, I've had inconsistent results with that particular
detection update; sometimes it reads clean, then later it will once
again find the DSO problem, and then it will read clean again, all on
the same machine, with no other changes made.

--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH

 

[Bruce Chambers]

Hi cy,

It sounds like you may need to d/load and run the Spybot - Search and
Destroy DSO Exploit Fix 1.3.1, available here:
http://www.majorgeeks.com/download4392.html



Regards,

FYI, Patti, that "fix" makes no difference on my machine. I still get
the false positive DSP alert.

But maybe it'll work on some machines.


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH

 

[Patti MacLeod]

Thanx for the FYI, Bruce. I haven't yet had a chance to run Spybot with the
"fix".



Regards,

 

[Kelly]

To avoid the False-Flag for the DSO Exploit (W3), open Spybot/Advanced
Mode/Settings/Ignore Products. On the All Products Tab, scrol to DSO
Exploit and check that item only. Randy (silj)


--
All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

 

[Guest]

Why not just running regedit, finding the specefied entries and replacing
them with a dword value equal to 3? I've done it & it worked. And for the
first time my spybot said "Congratulations!: No immediate threats were
found."

 

[Bruce Chambers]

Why not just running regedit, finding the specefied entries and replacing
them with a dword value equal to 3? I've done it & it worked. And for the
first time my spybot said "Congratulations!: No immediate threats were
found."

Why cobble a registry edit to "fix" a non-existent problem? It's
simpler by far just to tell SpyBot to stop reporting it.

--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH