Questions about Spybot

  • Thread starter Thread starter antidote
  • Start date Start date
A

antidote

Hi
I installed Spybot--the latest--and ran across the DSO Exploit thing.
So, I went to the Ignore Products tab in the advanced setting mode and
checked it so as to avoid the error, as advised elsewhere. By chance, I
just scrolled down a bit more, and found at least three others already
checked to be ignored---new.net sidesearch or something like that along
with one or two more.

Has anyone else seen this?

Thanks
Herm
 
Hi
I installed Spybot--the latest--and ran across the DSO Exploit thing.
So, I went to the Ignore Products tab in the advanced setting mode and
checked it so as to avoid the error, as advised elsewhere. By chance, I
just scrolled down a bit more, and found at least three others already
checked to be ignored---new.net sidesearch or something like that along
with one or two more.

Has anyone else seen this?
Click to expand...

Yes, I think I had the same things checked. I thought they rechecked
themselves when I unchecked them. I did it again, and the last I
checked, they were still unchecked.

I thought I had some kind of infection, but best I can tell, it comes
that way for some reason.

You know what to do: shdb at slip dot net
 
antidote said:
Hi
I installed Spybot--the latest--and ran across the DSO Exploit thing.
So, I went to the Ignore Products tab in the advanced setting mode and
checked it so as to avoid the error, as advised elsewhere. By chance, I
just scrolled down a bit more, and found at least three others already
checked to be ignored---new.net sidesearch or something like that along
with one or two more.

Has anyone else seen this?

Thanks
Herm
Click to expand...

Yes, they come ticked by default when you download Spybot.

But Spybot doesn't think that they are really nasty, so leaves the user
to decide. Unfortunately they don't tell you this!

Ed
 
You can download the 1.3.1tx patch 1MB from majorgeeks which either fixes it
for good or ignores it. Cheers
 
antidote said:
Hi
I installed Spybot--the latest--and ran across the DSO Exploit thing.
So, I went to the Ignore Products tab in the advanced setting mode and
checked it so as to avoid the error, as advised elsewhere.
Click to expand...

The DSO's are registry changes that should not be there. Spybot can
detect these but cannot fix them because it involves deleting one
registry key and then creating another new one different than the one
that was deleted. I have found as many as five of the same one.
The key that will be deleted (1004) will have the wrong key value -
most likely String Value when it should be Dword value. The website
below also says the wrong key value could also be REG_SZ.
Delete the String or REG_SZ key value entry, then create a new Dword
value key. When asked for the value number enter 3.
http://www.pchell.com/support/dsoexploit.shtml

Make a note of the location of the exploit shown in Spybot, something
similar to:

HKEY_USERS\S-1-5-21-1614895754-73586283-725345543-500\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\0\1004!=W=3

2) Click on Start, Run, and type REGEDIT and Press Enter to open the
Windows Registry Editor

3) Find the location of the exploit above in the registry by clicking on
the pluses(+) next to each title

4) After opening the Zones section and clicking on '0' look to the right
window, under 'name' is the key '1004' and the type is REG_SZ or String
simply right click and delete this REG_SZ or String value.Then right
click and create new>DWORD Value, name it 1004, then right click on that
and goto modify, give it the Hex Value of 3, Click ok.

If there is only a DWORD Value for the key (in this case 1004), then
double click on the key and change the HEX value to 3 and click Ok.


By chance, I
just scrolled down a bit more, and found at least three others already
checked to be ignored---new.net sidesearch or something like that along
with one or two more.

Has anyone else seen this?
Click to expand...

Sounds something like this website: www.new.net
 
Back
Top