BleepingComputer.com: DSO Exploits?

hi, gang...good to see everyone active...i have one small, quick question. i now run my adaware and spybot twice weekly...and every time i run spybot it comes up with the exact same thing...DSO EXPLOITS...i remove it every time, it says it has been successfully removed everytime. yet, every time i run spybot...there it is again!!

Any words of wisdom, oh wise ones?

nmdamgud

Try running the program in Safe Mode with system restore disabled. Don't forget to re-enable SystemRestore afterwards and set a manual checkpoint for it.
Regards,
John

Hi dg,
What you describe is a bug in the newest version of Spybot. DSO Exploit is a security flaw in Internet Explorer that will no longer affect you if your IE and Operating System is fully updated. Of course if you're not fully updated you should get that way.

You can find a technical explaination of what's going on at the Spybot S&D support forum here:
http://forums.net-integration.net/index.ph...hl=dso+exploits

An official explaination and discussion with what your options are (if you read the whole thread) here:
http://forums.net-integration.net/index.php?showtopic=17159

This is confusing a lot of people so I'm going to pin this topic. I'll come back later with a clearer explaination of what should be done when this happens. But for right now, just ignore it.

The DSO Exploit is a bug in Spybot S&D. If you have your sytem updated with the latest patches you are fine.

Here is some information from their support forum http://forums.net-integration.net/index.ph...hl=dso+exploits

ignore it? i can do that...i am, after all, a woman!!

damgud

Yah, well men can ignore it too.

Another option is to exclude DSO exploit from further searches. That way it won't come up in the scan results so there won't be anything to ignore.

You may have to run Spybot S&D in Advanced mode. Click Mode in the toolbar and select Advanced. When the scan is complete, right click on the DSO Exploit entry(s) and select Exclude.

There is some question as to whether this exploit has actually been fixed by MS. Does anyone know which patch addresses this issue?

There is a small freeware utility called DSOStop that is supposed to correct the exploit, but as I understand it, it goes beyond that to basically disable ActiveX altogether. So I wouldn't recommend it unless you understand exactly what it does and how it would affect your browsing experience. If you want to surf without the dangers of ActiveX or any other MS flaws try an alternate browser like Mozilla or Opera.

Hi,

I have the same problem with DSO exploits after having had the about:blank virus/spyware.

Thought I had removed this by using CWshredder, Ad-Aware, Norton and Spybot S&D plus updating to XP service pack 1a/2, but still exists.

You seem to think it is not a problem and a glitch with Spybot, but I think I may still have the or at least "a" virus/spyware as my machine is displaying the following symptoms:

Slow running times on internet
No pop ups tab in the tools menu of IE (so I can block them)
A changed toolbar in IE (lost the back/forward arrows and new things added)
Strange clicking noise when entering sites like there is a redirection
Yellow exclamation mark by the cursor hand when going to hotmail/other sites

I think this is related to the about:blank redirection and the DSO exploits but.....

The last two weeks has been a fair introduction to the world of viruses for me so any info greatly received!
Regards

pacino You should start your own topic. There is most definitely something going on with your 'puter.

This post has been edited by Scarlett: 25 August 2005 - 02:27 PM

For those who use Spybot and are still receiving the DSO Exploit error. You can download the following file that should help to fix it:

http://www.majorgeeks.com/download4392.html

For those who use Spybot and are still receiving the DSO Exploit error. You can download the following file that should help to fix it:

http://www.majorgeeks.com/download4392.html

Marvy, finally a patch from a site I trust. I have seen a patch before but the site it was on was well, lets just say questionable.

Nmdamgud...Did you get rid of your DSO Exploits? I had them and got rid of them without the download.

Thanks for this info. Sorry for duplicating this post below before seeing this!

Ally.