spybot won't remove dso exploit

Printable View

Show 40 post(s) from this thread on one page

June 17th, 2004, 10:37 PM
TripleRLtd

What update Suddbury? They just came out with a new version. So, do you have a link to what they advise, or at least a copy of what they told you to settle our "nerves" about what you are saying?
June 17th, 2004, 11:14 PM
Suddbury

I am using Spybot Version 1.3

Are you saying that there is a later version?
June 17th, 2004, 11:28 PM
TripleRLtd

No, that is the latest version, and it just came out. So: answer the question.
June 18th, 2004, 04:34 AM
NooNoo

Triple and others there is a really good explanation here

Suddbury - I was not aware, when I posted my comments that it was a bug. By the looks of it, neither were you. As Triple said, ignoring DSO exploits is a dangerous thing to do.

In your earliest two posts on the subject you did not mention having to patch with critical updates, in the third you mentioned it as an also ran. Few users can be bothered with the updates since they take forever to download. The likelihood of users taking your advice without having the ms patches is very high. Hence your advice as it stood is dangerous.
June 18th, 2004, 04:41 AM
NooNoo

Quote:

Originally Posted by f@@lpr@@f

What's the effect of changing those registry settings from 1004 to 1003? Does that remove the problem?

Spybot tells me, along with the registry listings:

"Company: Microsoft
Product: Internet Explorer
Threat: Security hole

"Description
There'a a security hole in IE allowing websites to execute code without asking you first."

That doesn't sound a mere hiccup in Spybot that the next update (of Spybot) will cure.

Welcome to Windrivers f@@lpr@@f

This explains the problem
June 18th, 2004, 07:20 PM
Liamm83

Hello guys. firstly I've never been here before and only just found it after searching for DSO exploit on google but felt that I should reply to this thread after reading it. oh, I have very little computer knowledge!

I've had my laptop for two weeks now and for the last few days the internet has been running slowly, often hanging, and randomly re-directing to porn sites. This is despite having all the most recent updates of windows (I'm running XP) and virus checks, Spybot etc.

Anyway, we've got rid of everything we've been alerted to apart from this 'DSO exploit' so it means that it's this causing all my problems. So ignoring it isn't an option I'm afraid - and that's why I'm posting. Maybe ignoring it will work for some people but at the moment it's currently making my brand new computer pretty useless so I wouldn't personally recommend it.

Bah humbug.

Liam
June 18th, 2004, 10:24 PM
Suddbury

Triple,
It may help to calm some nerves by checking out the following statement by a member of the Spybot development team which I quoted in my post of June 16:

http://forums.net-integration.net/in...howtopic=17159

I must apologise for not stating that Microsoft Updates should be current and installed, I just assumed everyone did that as a matter of course, but apparently not. I was rather surprised when I asked around at work.
June 18th, 2004, 11:05 PM
TripleRLtd

While I appreciate that Suddbury, most REAL techs keep up on the critical updates. But, when statements are made concerning "ignoring" DSO exploits without any "evidence" it needs to be addressed. And, as NooNoo and I stated, it is not good to ignore such threats.
That being said, now that NooNoo has provided the links and evidence that you failed to produce before, I am confident that all is well.
June 19th, 2004, 04:21 AM
NooNoo

Quote:

Originally Posted by Liamm83

Hello guys. firstly I've never been here before and only just found it after searching for DSO exploit on google but felt that I should reply to this thread after reading it. oh, I have very little computer knowledge!

I've had my laptop for two weeks now and for the last few days the internet has been running slowly, often hanging, and randomly re-directing to porn sites. This is despite having all the most recent updates of windows (I'm running XP) and virus checks, Spybot etc.

Anyway, we've got rid of everything we've been alerted to apart from this 'DSO exploit' so it means that it's this causing all my problems. So ignoring it isn't an option I'm afraid - and that's why I'm posting. Maybe ignoring it will work for some people but at the moment it's currently making my brand new computer pretty useless so I wouldn't personally recommend it.

Bah humbug.

Liam

Lliam Welcome to Windrivers. The work around for the spybot problem is quite dangerous for a novice - ie you can end up having to reinstall. The "fix is described here - use at your own risk.

If you say you have only had the lappie for two weeks, I would imagine you have not built up much in the way of critical data. Back up the files you want and do a system restore. This will eliminate 99.9% of all known germs :) Then go straight to windows updates and get those. I don't often recommend a system restore, however, due to your circumstances, it may well be the quickest, safest option for you at the moment.

Do you have antivirus? Do you have a firewall? Those two things should also be loaded and kept up to date.
June 21st, 2004, 07:04 PM
Takeit

DSO exploit

Quote:

Originally Posted by ITguy

Instead of telling Spybot to ignore the DSO exploit, use the information Spybot gives you and get rid of it.

Disconnect your internet, reboot your computer (you don't have to go into safemode to do this just boot normally), run Spybot. Go into the registry by going to the start menu then run, type in the word regedit and hit the OK button. Now locate one by one all the registy entries that Spybot said it found the DSO exploit in. Rename the 1004 files to 1003 then exit regedit. Shut down your computer. Plug your computer back into the internet, and restart your computer. Run Spybot again and you will see it is no longer there. Congratulations it gone. pretty simple huh?

ITguy

Thanks I have done this and did a scan and its gone
Thanks again
Takeit
June 22nd, 2004, 06:15 AM
NooNoo

Welcome to Windrivers Takeit

Glad you got it fixed.
June 23rd, 2004, 06:55 AM
ladyNY

I downloaded Spybot S&D updates and all 5 of my DSO exploit were removed
June 23rd, 2004, 12:23 PM
ITWrangler

DSO-CanadianRant

coming from a canadian tech. this rant is directed at "suddbury'........please keep your ill-advised(stupid) theories to yourself....how in the world does unchecking DSO Exploits in Spybot(as you posted... do anything other than avoid checking for DSO exploits...??? please stop posting your idotic method for resolving this issue...and to anyone who really would like to resolve this annoyance, please check 'noonoo's post... http://forums.net-integration.net/in...howtopic=15308
June 23rd, 2004, 12:36 PM
GrandDad

Quote:

Originally Posted by ladyNY

I downloaded Spybot S&D updates and all 5 of my DSO exploit were removed

Welcome to WD ladyNY .
Glad you sorted your problems and hope some of the info at WD has help you .
June 23rd, 2004, 03:06 PM
NooNoo

Quote:

Originally Posted by ITWrangler

coming from a canadian tech. this rant is directed at "suddbury'........please keep your ill-advised(stupid) theories to yourself....how in the world does unchecking DSO Exploits in Spybot(as you posted... do anything other than avoid checking for DSO exploits...??? please stop posting your idotic method for resolving this issue...and to anyone who really would like to resolve this annoyance, please check 'noonoo's post... http://forums.net-integration.net/in...howtopic=15308

Welcome to Windrivers ITwrangler... and thanks for the support. https://forums.windrivers.com/images.../2007/09/1.gif

Show 40 post(s) from this thread on one page