PDA

View Full Version : what is a dso exploit?


npoon
June 19th, 2004, 06:17 PM
I did a spybot scan and it shows that I have 5 entries of this. What does it mean?

snowbound
June 19th, 2004, 06:21 PM
{QUOTE-> I did a spybot scan and it shows that I have 5 entries of this. What does it mean? <-QUOTE}

It is a bug in SpyBot 1.3, explanation here,

http://www.wilderssecurity.com/showthread.php?p=200097


Hope this helps.


snowbound

LowWaterMark
June 19th, 2004, 06:22 PM
The DSO Exploit finding in Spybot 1.3 has been a problem since that version was first released. Spybot keeps finding the same items over and over, even when you tell it to fix them because of a bug. The fix doesn't apply because of a small error in the program. The Spybot team is fully aware of it and have even coded a fix, but they just haven't released it yet.

You may want to read this rather long thread over on the Spybot forum at Net-Integration. (Note that NI has been on and offline a few times today, but appears to be up at the moment):

http://forums.net-integration.net/index.php?showtopic=15308

Basically, anyone who has their system patched via Windows Update can ignore this Spybot finding. All it's trying to do is set an IE security setting to "disabled", but the bug is preventing that registry change from being applied. That thread explains various work-arounds for anyone who wants to do something about it themselves rather than waiting for a Spybot fix.

snowbound
June 19th, 2004, 06:35 PM
Either way, u get the best explainer in the business(LWM)! :D ;D



snowbound

npoon
June 19th, 2004, 10:12 PM
thanks for the prompt reply.

Detox
January 22nd, 2005, 05:20 PM
Nonsensical guest post removed.

LockBox
January 23rd, 2005, 09:56 PM
From the Spybot Web Site:
Why does DSO Exploit return?

DSO-Exploit is a security gap in Internet Explorer, Outlook and Outlook Express. Microsoft did already close this gap with security updates, so with current Windows updates and patches installed, it will no longer be a threat to your system.
Spybot-S&D will still detect the DSO-Exploit, but instead of fixing it for good, it will unfortunately again set an invalid value. Therefore it will again be found with every scan.
This little bug in Spybot-S&D has already been repaired and the respective fix will soon be available as a program update.
If I'm not mistaking, this STILL has not been released in a new program update. Spybot detections are falling farther behind rival products. As sad as it is, I think SS&D has seen its best days. I appreciate all Patrick has done - but it sure seems the pay versions are now head and shoulders ahead of Spybot. It's too bad.

jag1967
January 24th, 2005, 09:20 AM
{QUOTE-> :
Spybot detections are falling farther behind rival products. As sad as it is, I think SS&D has seen its best days. I appreciate all Patrick has done - but it sure seems the pay versions are now head and shoulders ahead of Spybot. It's too bad. <-QUOTE}

This is worrying as a lot of folks use spybot. Is there any latest comparisions/tests alongside other progs which demonstrate that spybot is in decline?

rgds
jag

Rosie
January 27th, 2005, 11:59 AM
Spybot does have a fix for the 'DSO Exploit'
Go to:-

http://majorgeeks.com/download4392.html

The download will add TX to the Spybot S&D title.

Run Spybot S&D, after installing the fix, it will show the 'DSO Exploit' x 5 entries again, delete them, Reboot and run Spybot again and you should not get any more alerts.

Regards

Rosie