Nancy_McAleavey
March 23rd, 2002, 06:48 PM
We built a new "DSOStop2" program. It's available to download from:
http://www.nsclean.com/dsostop.html
The original DSOSTOP has been withdrawn and it will be a few days before other mirror sites catch up with the change. This new version "2" will perform the test on both "signed" and "unsigned" ActiveX controls before indicating safety and will warn if either or both have been set to "allow." The original protected both, but only reported the status concerning the Greymagic vulnerability.
This new build was created to address a number of concerns raised by some individuals who were concerned about people who have "customized" either their registry zone settings or their "security settings" into potentially conflicting modes. Other objections were raised that DSOSTOP also changed the settings for the Internet Zone as well in order to prevent other similar exploits from occuring across the internet. We included the internet zone in the original DSOStop since "object tags" are frequently used to place trojan horses on people's machines from a web page and thought it was a good idea to include protection from that as well. We still believe that including the internet zone in DSOSTOP was a good idea but we've decided to provide a choice instead. *:)
http://www.nsclean.com/dsostop.html
The original DSOSTOP has been withdrawn and it will be a few days before other mirror sites catch up with the change. This new version "2" will perform the test on both "signed" and "unsigned" ActiveX controls before indicating safety and will warn if either or both have been set to "allow." The original protected both, but only reported the status concerning the Greymagic vulnerability.
This new build was created to address a number of concerns raised by some individuals who were concerned about people who have "customized" either their registry zone settings or their "security settings" into potentially conflicting modes. Other objections were raised that DSOSTOP also changed the settings for the Internet Zone as well in order to prevent other similar exploits from occuring across the internet. We included the internet zone in the original DSOStop since "object tags" are frequently used to place trojan horses on people's machines from a web page and thought it was a good idea to include protection from that as well. We still believe that including the internet zone in DSOSTOP was a good idea but we've decided to provide a choice instead. *:)