spyware

[Guest]

Hey guys......You have helped me before so here is a new one for you..... I
have spybot search and destroy, adaware and spywareguard on my computer but
still cant get rid of a dso exploit !! Any suggestions? Are they harmfull?
Should I worry? Thanks

 

[jopa66]

This is a bug in Spybot which they say will be fixed in the next version. It
is safe to ignore this, add it to the ignore list or better yet - turn it
off in the settings. To do this, you need to be in "Advanced Mode" from the
Menu bar.

Click the Setings tab > then click "Ignore Products"
Scroll the list under "All Products" tab and put a check in "DSO Exploit" to
ignore this bot check.
If you want - there are already some other checks such as New.Net which are
there by default. Remove these checks to allow scanning for this spyware.
I'm not sure why Spybot blocks these out but, personally, I prefer to scan
for them.

quote:
"The DSO Exploit is a security gap in IE. Microsoft has already repaired
this, so if you have all Windows updates and patches installed, it will not
be dangerous for your system. Spybot S&D will still find it, because it
contains an invalid value. Spybot S&D just has to reset that value.
Unfortunately, in the current version, it sets again an incorrect value, so
it is found in the next scan."

 

[S.Sengupta]

http://www.majorgeeks.com/download4392.html
http://www.pchell.com/support/dsoexploit.shtml

regards,
ssg MS-MVP

 

[Bruce Chambers]

Hey guys......You have helped me before so here is a new one for you..... I
have spybot search and destroy, adaware and spywareguard on my computer but
still cant get rid of a dso exploit !! Any suggestions? Are they harmfull?
Should I worry? Thanks

There's nothing to get rid of.

The DSO exploit was patched long ago by IE Cumulative Update
MS02-015, in March of 2002. If you've installed this specific patch,
or any subsequent IE Cumulative Updates, IE Service Pack 1, or WinXP
SP2, you're safe. It would appear that the latest version of SpyBot
S&D is only checking for Internet zone settings in the registry that
could be used as work-around protection, and not for the presence of
any corrective patches. Hopefully, the makers of SpyBot will soon fix
this bug.

MS02-015 March 28, 2002 Cumulative Patch for Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;EN-US;319182

If you like, you can test your system for this particular
vulnerability at this web site:
http://www.grey.com/security/advisories/gm001-ie/

The makers of SpyBot S&D have acknowledged the problem and will
fix it on their next update:
http://www.safer-networking.org/index.php?page=paragraphs&detail=currentfaqs

In the meantime, in SpyBot S&D, click Mode > Advanced > Settings >
Ignore Products > Security > DSO Exploit, to turn off the false alarm.

Some people have reported that the SpyBot Detection rules dated 30
Aug 04, or newer, when used with SpyBot S&D 1.3.1TX, will fix this
problem. However, I've had inconsistent results with that particular
detection update; sometimes it reads clean, then later it will once
again find the DSO problem, and then it will read clean again, all on
the same machine, with no other changes made.


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH