A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Security and Administration with Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

DSO Exploit



 
 
Thread Tools Display Modes
  #1  
Old June 17th 04, 01:41 PM
Alice
external usenet poster
 
Posts: n/a
Default DSO Exploit

I have recently installed "Sypbot S&D" and it keeps
finding a spyware called DSO Exploit that effects your
registry. I deleted it once and again it came back. As I
am a novice of registry, I hesitate to keep deleting it---
any advise?
Ads
  #2  
Old June 17th 04, 02:42 PM
Carey Frisch [MVP]
external usenet poster
 
Posts: n/a
Default DSO Exploit

Could be it's hiding in System Restore.
Turn off System Restore and run the fixes again.

How to Turn On and Turn Off System Restore in Windows XP
http://support.microsoft.com/default...&Product=winxp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-----------------------------------------------------------------------------------

"Alice" wrote in message:
...

|I have recently installed "Sypbot S&D" and it keeps
| finding a spyware called DSO Exploit that effects your
| registry. I deleted it once and again it came back. As I
| am a novice of registry, I hesitate to keep deleting it---
| any advise?
  #3  
Old June 17th 04, 02:42 PM
Bruce Chambers
external usenet poster
 
Posts: n/a
Default DSO Exploit

Greetings --

That particular exploit was patched by an IE Cumulative Update
MS02-015, in March of 2002. If you've installed this specific patch,
or any subsequent IE Cumulative Updates, or Service Pack 1, you're
safe. It would appear that the latest version of Spybot S&D is only
checking for Internet zone settings in the registry that could be used
as work-around protection, and not for the presence of any corrective
patches. Hopefully, the makers of Spybot will soon fix this bug.

MS02-015 March 28, 2002 Cumulative Patch for Internet Explorer
http://support.microsoft.com/default...b;EN-US;319182

If you like, you can test your system for this particular
vulnerability at this web site:
http://www.greymagic.com/security/advisories/gm001-ie/


Bruce Chambers
--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH


"Alice" wrote in message
...
I have recently installed "Sypbot S&D" and it keeps
finding a spyware called DSO Exploit that effects your
registry. I deleted it once and again it came back. As I
am a novice of registry, I hesitate to keep deleting it---
any advise?



  #4  
Old June 17th 04, 02:42 PM
external usenet poster
 
Posts: n/a
Default DSO Exploit

thank You.I read the article you pointed out to me and if
I understand it corectly, If I turn off the system restore
(just uncheck the box) ALL my previous restore points will
be removed!! Is there a way to just temp turn off and
save all the old ones in case I want to restore back to an
earlier time if I continue to have problems?

-----Original Message-----
Could be it's hiding in System Restore.
Turn off System Restore and run the fixes again.

How to Turn On and Turn Off System Restore in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-

us;310405&Product=winxp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

----------------------------------------------------------

-------------------------

"Alice" wrote in

message:
...

|I have recently installed "Sypbot S&D" and it keeps
| finding a spyware called DSO Exploit that effects your
| registry. I deleted it once and again it came back.

As I
| am a novice of registry, I hesitate to keep deleting it-

--
| any advise?
.

  #5  
Old June 17th 04, 03:42 PM
Old Bob
external usenet poster
 
Posts: n/a
Default DSO Exploit

Thank You.....I have always installed any and all patches
from windows as soon as available..thank you. I went to
spybot site says they are aware of the issue and will
correct on the next update. Have I harmed anything since
I deleted the registry items already once? After the line
that detected the spyware it say (nothing done)-does this
mean there has been no harm done and I should not have
deleted the file?

-----Original Message-----
Greetings --

That particular exploit was patched by an IE

Cumulative Update
MS02-015, in March of 2002. If you've installed this

specific patch,
or any subsequent IE Cumulative Updates, or Service Pack

1, you're
safe. It would appear that the latest version of Spybot

S&D is only
checking for Internet zone settings in the registry that

could be used
as work-around protection, and not for the presence of

any corrective
patches. Hopefully, the makers of Spybot will soon fix

this bug.

MS02-015 March 28, 2002 Cumulative Patch for Internet

Explorer
http://support.microsoft.com/default.aspx?scid=kb;EN-

US;319182

If you like, you can test your system for this

particular
vulnerability at this web site:
http://www.greymagic.com/security/advisories/gm001-ie/


Bruce Chambers
--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever

count on
having both at once. - RAH


"Alice" wrote in

message
...
I have recently installed "Sypbot S&D" and it keeps
finding a spyware called DSO Exploit that effects your
registry. I deleted it once and again it came back.

As I
am a novice of registry, I hesitate to keep deleting it-

--
any advise?



.

  #6  
Old June 17th 04, 05:43 PM
Jupiter Jones [MVP]
external usenet poster
 
Posts: n/a
Default DSO Exploit

If you restore the computer with System Restore, you also restore the
exploits.
Turning off System Restore deletes all Restore Points.
There is no way to "temp turn off and save all the old ones".

--
Jupiter Jones [MVP]
http://www3.telus.net/dandemar/


wrote in message
...
thank You.I read the article you pointed out to me and if
I understand it corectly, If I turn off the system restore
(just uncheck the box) ALL my previous restore points will
be removed!! Is there a way to just temp turn off and
save all the old ones in case I want to restore back to an
earlier time if I continue to have problems?

-----Original Message-----
Could be it's hiding in System Restore.
Turn off System Restore and run the fixes again.

How to Turn On and Turn Off System Restore in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-

us;310405&Product=winxp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

----------------------------------------------------------

-------------------------

"Alice" wrote in

message:
...

|I have recently installed "Sypbot S&D" and it keeps
| finding a spyware called DSO Exploit that effects your
| registry. I deleted it once and again it came back.

As I
| am a novice of registry, I hesitate to keep deleting it-

--
| any advise?
.



  #7  
Old June 18th 04, 05:44 AM
Bruce Chambers
external usenet poster
 
Posts: n/a
Default DSO Exploit

Greetings --

If IE is still working properly, you may not have hurt anything.
If you're worried, however, you could use a restore point to return
the registry to it's pre-deletion state.

Bruce Chambers
--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH


"Old Bob" wrote in message
...
Thank You.....I have always installed any and all patches
from windows as soon as available..thank you. I went to
spybot site says they are aware of the issue and will
correct on the next update. Have I harmed anything since
I deleted the registry items already once? After the line
that detected the spyware it say (nothing done)-does this
mean there has been no harm done and I should not have
deleted the file?



 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 06:14 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.