Spybot-S&D fixes a DSO Exploit but it returns

  • Thread starter Thread starter skydiver
  • Start date Start date
S

skydiver

Spybot-S&D finds a DSO Exploit but it returns...

That tells it all, almost...

Spybot-S&D found a DSO Exploit consisting of 5 registry entries in
HKeyUsers, fixed them, but they reappear on subsequent scans.

On the first attempt, there was a popup message saying that "something"
hadn't started correctly (an .exe file, I believe) and reinstalling the
application might help. It disappeared quickly and hasn't returned, so
there's no way to investigate further.

I would provide a copy of the DSO Exploit details herein, but can't obtain
that info from Spybot-S&D easily. The Spybot-S&D Recovery operation displays
a long list of registry entries involved but provides no way to copy or
access it directly that I can discover. I could re-type it manually, but
that would be very tedious and take a long time.

Any suggestions?
 
Spybot-S&D finds a DSO Exploit but it returns...

That tells it all, almost...

Spybot-S&D found a DSO Exploit consisting of 5 registry
entries in HKeyUsers, fixed them, but they reappear on
subsequent scans.

On the first attempt, there was a popup message saying that
"something" hadn't started correctly (an .exe file, I
believe) and reinstalling the application might help. It
disappeared quickly and hasn't returned, so there's no way
to investigate further.

I would provide a copy of the DSO Exploit details herein,
but can't obtain that info from Spybot-S&D easily. The
Spybot-S&D Recovery operation displays a long list of
registry entries involved but provides no way to copy or
access it directly that I can discover. I could re-type it
manually, but that would be very tedious and take a long
time.

Any suggestions?
Try Textgrabber copies text from "non-copyable" windows (not
100% but better 'n nothing).
http://dl.winsite.com/files/263/ar2/win95/misc/textgrabber_v10.z
ip

J
 
skydiver said:
Spybot-S&D finds a DSO Exploit but it returns...

That tells it all, almost...

Spybot-S&D found a DSO Exploit consisting of 5 registry entries in
HKeyUsers, fixed them, but they reappear on subsequent scans.

On the first attempt, there was a popup message saying that "something"
hadn't started correctly (an .exe file, I believe) and reinstalling the
application might help. It disappeared quickly and hasn't returned, so
there's no way to investigate further.

I would provide a copy of the DSO Exploit details herein, but can't obtain
that info from Spybot-S&D easily. The Spybot-S&D Recovery operation
displays a long list of registry entries involved but provides no way to
copy or access it directly that I can discover. I could re-type it
manually, but that would be very tedious and take a long time.

Any suggestions?

Update Spybot S & D - this is a common problem with Spybot, has been
mentioned in this NG before so try a Google..
 
Martin said:
Update Spybot S & D - this is a common problem with Spybot, has been
mentioned in this NG before so try a Google..

I already have version 1.3 and the latest internal updates. I see from their
website that everything is a "beta" and three different versions of the 1.3
beta were released, but have no way of knowing which one I have. How would I
tell? My downloaded setup file spybotxd13.exe was 4.15 MB (4,354,084 bytes).
So do I have the latest version?
 
I recently formatted my hard drive and reinstalled Spybot 1.3. I was
hoping perhaps Spybot had released an updated version of 1.3 that fixed the
DSO glitch. I went to majorgeeks.com, which normally has the latest
versions of these programs, and downloaded it from there. But the DSO
glitch remains. A tech from Spybot recently told me the 1.3.1 TX patch was
a beta and had bugs, hence the reason it was no longer listed on their site.
However, majorgeeks is still offering it. The patch worked for me in the
past. However, I think I'll wait for the final version of 1.4, which is
long overdue.
 
skydiver said:
Thanks for the tip. I've downloaded and am trying it, but can't get it to
work. Maybe I don't understand how. There are not enough instructions. Can
you walk me through the procedure? Thanks.

I figured it out...
It just wasn't working on the windows I tried.
It doesn't work on the Spybot recovery window.
However it works fine on Windows Explorer windows, for example, to capture a
text copy of file lists. That should be useful. It's also an easier way to
copy text from large windows.
 
Why not?
It's probably as good as any other.
Hey... they're ALL betas!!!!!!
Perpetual betas, one after another...
Never any final versions.
--

Are you sure about that? Seems rather strange.
 
I figured it out...
It just wasn't working on the windows I tried.
It doesn't work on the Spybot recovery window.
However it works fine on Windows Explorer windows, for
example, to capture a text copy of file lists. That should
be useful. It's also an easier way to copy text from large
windows.

Yeah, that's the "not 100%."
FWIW, the word "window" as used in Textgrabber's description
(hint) is not the window most ppl think of as they use windoze.

Try this: open, e.g., Notepad and click Help|About.
Shift+Ctrl r-click on the empty space inside the "About Notepad"
box (at the left side), ditto on some _text(s)_, ditto on the
"OK" button and observe that Textgrabber copies.

J
 
History Fan said:
Are you sure about that? Seems rather strange.


The TX patch (and it is a patch - you still need the full install of 1.3 for
it to work) solves the DSO problem - seems to work fine for me, no glitches,
no other problems. Scans fine now, no DSO Exploit problems, gets rid of
everything it finds OK... I just could never remember where I downloaded
the patch from!!! (hence my reference to search Google).....
 
Luke said:
Spybot-S&D finds a DSO Exploit but it returns... [snip]
Any suggestions?

It's a known bug. Just add the DSO Exploit to ignorde products and
forget about it.

That's the best suggestion I've heard. I just wonder if my attempts to fix
the bogus DSO exploit caused any harm to my computer. The different versions
and patches for Spybot are a nightmare.
 
Luke said:
Spybot-S&D finds a DSO Exploit but it returns... [snip]
Any suggestions?

It's a known bug. Just add the DSO Exploit to ignorde products and
forget about it.

That's the best suggestion I've heard.

You're welcome. It's not original with me, however :-).
I just wonder if my attempts to fix
the bogus DSO exploit caused any harm to my computer. The different versions
and patches for Spybot are a nightmare.

I haven't kept track of everything you did, but probably no harm done.
If in doubt try to remove everything and reinstall S&D 1.3 "beta" ;-).
Luck!
 
Look at the list of updates/changes in Spybot listed on their website.
http://www.spybot.info/en/versionhistory/index.html#Uzbek
Almost nothing but betas listed. Seldom a final version. None of the 1.3
versions are a final version, all are betas. The latest final version
listed is 1.1 final (10/12/02)!
--

Weird. Never seen a program listing like that. Irregardless, I'm
going to wait until Spybot 1.4 is widely available throughout the Internet
before trying it out. I'm referring to sites like majorgeeks, cnet and
pcworld. Right now all three are still offering version 1.3.
 
skydiver said:
Spybot-S&D finds a DSO Exploit but it returns...

That tells it all, almost...

Spybot-S&D found a DSO Exploit consisting of 5 registry entries in
HKeyUsers, fixed them, but they reappear on subsequent scans.

On the first attempt, there was a popup message saying that "something"
hadn't started correctly (an .exe file, I believe) and reinstalling the
application might help. It disappeared quickly and hasn't returned, so
there's no way to investigate further.

I would provide a copy of the DSO Exploit details herein, but can't obtain
that info from Spybot-S&D easily. The Spybot-S&D Recovery operation displays
a long list of registry entries involved but provides no way to copy or
access it directly that I can discover. I could re-type it manually, but
that would be very tedious and take a long time.

Any suggestions?


Go here and read this about DSO Exploits:
http://www.pchell.com/support/dsoexploit.shtml

Netuser 58
 
skydiver said:
Thanks. That clears everything up! So I can safely ignore it, because "DSO
exploit" has been patched (is not a risk) with the current updated IE. My
only concern is whether Spybot's attempts to fix it caused any harm to my
computer(?).

I wouldn't think so. I had five DSO's also, so I went into my regisrty
to the locations indicated and changed the value key back to the proper
DWORD value key (it had been changed to a String value key which is
wrong). That fixed all the DSO readings. I'm glad Spybot detects them.

Netuser 58
 
Back
Top