How to remove DSO Exploit spyware from the registry?

[Guest]

Hi everybody, I used a couple of spyware removal programs (all latest
versions with updated definitions), such as Ad-Aware, Spy Sweeper and Spybot:
S&D, but I can't seem to get rid of DSO Exploit. And its only Spybot that
detects it. When I try to remove it after running a scan, Spybot says the
problem is fixed, but when I run another scan it detects it again, even
though I haven't been on the Net again. Also, when I open Internet Explorer,
another window taking me to another site pops up which I also can't get rid
of, even after resetting IE's default settings. Can anybody please help

 

[Guest]

Start your PC in safe mode by pressing F8 during boot.
Then run Spybot and adaware and reboot the machine to
normal mode.
All should be fine after that.

 

[Patti MacLeod]

Hi Seraph,

It sounds like you may need to d/load and run the Spybot - Search and
Destroy DSO Exploit Fix 1.3.1, available here:
http://www.majorgeeks.com/download4392.html



Regards,

 

[Jim Macklin]

The DSO Exploit detection by SpyBot is a false detection.
See http://www.safer-networking.org/en/faq/36.html

Why does DSO Exploit return? [link]
DSO-Exploit is a security gap in Internet Explorer,
Outlook and Outlook Express. Microsoft did already close
this gap with security updates, so with current Windows
updates and patches installed, it will no longer be a threat
to your system.
Spybot-S&D will still detect the DSO-Exploit, but
instead of fixing it for good, it will unfortunately again
set an invalid value. Therefore it will again be found with
every scan.
This little bug in Spybot-S&D has already been
repaired and the respective fix will soon be available as a
program update.



--
The people think the Constitution protects their
rights;
But government sees it as an obstacle to be overcome.



| Hi everybody, I used a couple of spyware removal programs
(all latest
| versions with updated definitions), such as Ad-Aware, Spy
Sweeper and Spybot:
| S&D, but I can't seem to get rid of DSO Exploit. And its
only Spybot that
| detects it. When I try to remove it after running a scan,
Spybot says the
| problem is fixed, but when I run another scan it detects
it again, even
| though I haven't been on the Net again. Also, when I open
Internet Explorer,
| another window taking me to another site pops up which I
also can't get rid
| of, even after resetting IE's default settings. Can
anybody please help

 

[Guest]

yea DSO Eploit is a common thing in Spybot.I get it all the time. no big
deal. have to take my word on it.

 

[Bruce Chambers]

Hi everybody, I used a couple of spyware removal programs (all latest
versions with updated definitions), such as Ad-Aware, Spy Sweeper and Spybot:
S&D, but I can't seem to get rid of DSO Exploit. And its only Spybot that
detects it. When I try to remove it after running a scan, Spybot says the
problem is fixed, but when I run another scan it detects it again, even
though I haven't been on the Net again. Also, when I open Internet Explorer,
another window taking me to another site pops up which I also can't get rid
of, even after resetting IE's default settings. Can anybody please help

The DSO exploit was patched long ago by IE Cumulative Update
MS02-015, in March of 2002. If you've installed this specific patch,
or any subsequent IE Cumulative Updates, IE Service Pack 1, or WinXP
SP2, you're safe. It would appear that the latest version of SpyBot
S&D is only checking for Internet zone settings in the registry that
could be used as work-around protection, and not for the presence of
any corrective patches. Hopefully, the makers of SpyBot will soon fix
this bug.

MS02-015 March 28, 2002 Cumulative Patch for Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;EN-US;319182

If you like, you can test your system for this particular
vulnerability at this web site:
http://www.grey.com/security/advisories/gm001-ie/

The makers of SpyBot S&D have acknowledged the problem and will
fix it on their next update:
http://www.safer-networking.org/index.php?page=paragraphs&detail=currentfaqs

In the meantime, in SpyBot S&D, click Mode > Advanced > Settings >
Ignore Products > Security > DSO Exploit, to turn off the false alarm.

Some people have reported that the SpyBot Detection rules dated 30
Aug 04, or newer, when used with SpyBot S&D 1.3, will fix this
problem. However, I've had inconsistent results with that particular
detection update; sometimes it reads clean, then later it will once
again find the DSO problem, and then it will read clean again, all on
the same machine, with no other changes made.

--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH

 

[Kelly]

To avoid the False-Flag for the DSO Exploit (W3), open Spybot/Advanced
Mode/Settings/Ignore Products. On the All Products Tab, scrol to DSO
Exploit and check that item only. Randy (silj)

--
All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

 

[Alex Nichol]

Hi everybody, I used a couple of spyware removal programs (all latest
versions with updated definitions), such as Ad-Aware, Spy Sweeper and Spybot:
S&D, but I can't seem to get rid of DSO Exploit. And its only Spybot that
detects it.

Spybot shows up three legitimate registry lines as a spurious DSO. I
think their most recent version has corrected this; but you can select
the items and put them in the permanently ignore