DSO Exploit - HKEY USERS - Registry Change

Can anyone help with the above problem .. a friend just brought a computer and we are trying to clean up files were are not sure of .. we have installed spybot and ad aware, run both, and even though ad aware did pick up some problems, we fixed them and no
w it is running clear, spybot brought up quite a few things and we fixed them, one item it said it could not delete unless we restarted, we did this, spybot did open on start up and i thought it would clear the problem, but when we ran spybot again when co
mputer was fully rebooted it is bringing up one folders 'DSO EXPLOIT' with 5 entries within it .. they are HKEY_USERS 5-1-5-18, 19, 20, 21 and DEFAULT folder .. i am trying to delete it (assuming that it is a bad thing that shouldn't be on the system) it i
s saying they are deleted but when i run Spybot again they are all still there .. what on earth are they ? can anyone help me ? and should i be trying to delete them ? .. thanks in advance for any help you can give

Basically what's happening is that Spybot is finding that the security setting
for "Download Unsigned ActiveX controls" for the (normally) hidden
"My Computer" zone in Internet Explorer is not set to disabled.

Visit http://forums.net-integration.net/in...howtopic=15308
for additional info.

Make sure you visit the Windows Update website and download any
recommended Critical Updates.

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

---------------------------------------------------------------------------------------------

"problemsrus" wrote in message:
...

| Can anyone help with the above problem .. a friend just brought a computer and we are trying to clean up
files were are not sure of .. we have installed spybot and ad aware, run both, and even though ad aware did
pick up some problems, we fixed them and now it is running clear, spybot brought up quite a few things and we
fixed them, one item it said it could not delete unless we restarted, we did this, spybot did open on start up
and i thought it would clear the problem, but when we ran spybot again when computer was fully rebooted it is
bringing up one folders 'DSO EXPLOIT' with 5 entries within it .. they are HKEY_USERS 5-1-5-18, 19, 20, 21 and
DEFAULT folder .. i am trying to delete it (assuming that it is a bad thing that shouldn't be on the system)
it is saying they are deleted but when i run Spybot again they are all still there .. what on earth are they ?
can anyone help me ? and should i be trying to delete them ? .. thanks in advance for any help you can give

Basically what's happening is that Spybot is finding that the security setting
for "Download Unsigned ActiveX controls" for the (normally) hidden
"My Computer" zone in Internet Explorer is not set to disabled.

Visit http://forums.net-integration.net/in...howtopic=15308
for additional info.

Make sure you visit the Windows Update website and download any
recommended Critical Updates.

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

---------------------------------------------------------------------------------------------

"problemsrus" wrote in message:
...

| Can anyone help with the above problem .. a friend just brought a computer and we are trying to clean up
files were are not sure of .. we have installed spybot and ad aware, run both, and even though ad aware did
pick up some problems, we fixed them and now it is running clear, spybot brought up quite a few things and we
fixed them, one item it said it could not delete unless we restarted, we did this, spybot did open on start up
and i thought it would clear the problem, but when we ran spybot again when computer was fully rebooted it is
bringing up one folders 'DSO EXPLOIT' with 5 entries within it .. they are HKEY_USERS 5-1-5-18, 19, 20, 21 and
DEFAULT folder .. i am trying to delete it (assuming that it is a bad thing that shouldn't be on the system)
it is saying they are deleted but when i run Spybot again they are all still there .. what on earth are they ?
can anyone help me ? and should i be trying to delete them ? .. thanks in advance for any help you can give