exploit

  • Thread starter Thread starter maur.s
  • Start date Start date
M

maur.s

Can anyone tell me how to remove EXPLOIT DSO from my registry(4 entries). I
have looked at the registry, but can find no sign of it.Spybot says it has
been removed, but on restart, it has reappeared.
 
I have removed it from my computer, although everyone seems to think its not
necessary as the problem supposedly has been solved by Microsoft. Spybot has
also stated that it intends to cure the problem in an upcoming update.
(hasn't happened yet.) I just got tired of seeing the Exploit coming up
everytime I check for problems.

Its not that hard to do. You have to change the registry items your self.
The 0 zone, 1004 has to be modified and changed from BLANK to 000000003. If
you don't know how to do that let the group know.

FM
 
maur.s said:
Can anyone tell me how to remove EXPLOIT DSO from my registry(4
entries). I have looked at the registry, but can find no sign of
it.Spybot says it has been removed, but on restart, it has
reappeared.
Click to expand...


The DSO exploit was patched long ago by IE Cumulative Update
MS02-015, in March of 2002. If you've installed this specific patch,
or any subsequent IE Cumulative Updates, or IE Service Pack 1, you're
safe. It would appear that the latest version of Spybot S&D is only
checking for Internet zone settings in the registry that could be used
as work-around protection, and not for the presence of any corrective
patches. Hopefully, the makers of Spybot will soon fix this bug.

MS02-015 March 28, 2002 Cumulative Patch for Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;EN-US;319182

If you like, you can test your system for this particular
vulnerability at this web site:
http://www.grey.com/security/advisories/gm001-ie/

The makers of SpyBot S&D have acknowledged the problem and will
fix it on their next update:
http://www.safer-networking.org/index.php?page=paragraphs&detail=currentfaqs

In the meantime, in SpyBot S&D, click Mode > Advanced > Settings >
Ignore Products > Security > DSO Exploit, to turn off the false alarm.

Some people have reported that the Spybot Detection rules dated 30
Aug 04, when used with SpyBot S&D 1.3, will fix this problem.
However, I've had inconsistent results with that particular detection
update; sometimes it reads clean, then later it will once again find
the DSO problem, and then it will read clean again, all on the same
machine, with no other changes made.

--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having
both at once. - RAH
 
Back
Top