DSO Exploit how to remove

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • juicylinks
    So Fucking Banned
    • Apr 2001
    • 122992

    #1

    DSO Exploit how to remove

    dont tell me spybot cause you gotta do some funky shit to remove

    Last edited by Juicy D. Links; 08-22-2004, 04:52 PM.
  • ldinternet
    Confirmed User
    • Apr 2001
    • 8245

    #2
    Spybot keeps showing that on my machine too. Each time it is "fixed"... but it's obviously not working because it keeps coming back. So I've been ignoring that shit. Apparently... whatever the fuck it is, Microsoft have known about it for at least the past 12 months.

    Comment

    • ztik
      Confirmed User
      • Aug 2001
      • 5196

      #3
      Start > run > regedit

      delete the keys...

      just have to be removed manualy.

      DSO Exploit: Data source object exploit (Registry change, nothing done)
      HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004=W=3

      DSO Exploit: Data source object exploit (Registry change, nothing done)
      HKEY_USERS\S-1-5-21-572454927-1110412475-1538417202-1003\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\Zones\0\1004=W=3

      DSO Exploit: Data source object exploit (Registry change, nothing done)
      HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004=W=3

      DSO Exploit: Data source object exploit (Registry change, nothing done)
      HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004=W=3

      DSO Exploit: Data source object exploit (Registry change, nothing done)
      HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Internet Settings\Zones\0\1004=W=3
      .

      Comment

      • juicylinks
        So Fucking Banned
        • Apr 2001
        • 122992

        #4
        Originally posted by ztik
        Start > run > regedit

        delete the keys...

        just have to be removed manualy.

        DSO Exploit: Data source object exploit (Registry change, nothing done)
        HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004=W=3

        DSO Exploit: Data source object exploit (Registry change, nothing done)
        HKEY_USERS\S-1-5-21-572454927-1110412475-1538417202-1003\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\Zones\0\1004=W=3

        DSO Exploit: Data source object exploit (Registry change, nothing done)
        HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004=W=3

        DSO Exploit: Data source object exploit (Registry change, nothing done)
        HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004=W=3

        DSO Exploit: Data source object exploit (Registry change, nothing done)
        HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Internet Settings\Zones\0\1004=W=3

        thank you

        Comment

        • juicylinks
          So Fucking Banned
          • Apr 2001
          • 122992

          #5
          bump for others

          JUICYYYYYYYYYYYYYY

          Comment

          • juicylinks
            So Fucking Banned
            • Apr 2001
            • 122992

            #6
            http://www.nsclean.com/dsostop.html good tool

            Comment

            • Mutt
              Too lazy to set a custom title
              • Sep 2002
              • 34431

              #7
              i had the same problem - it's nothing to worry about, it's a bug in Spybot, DSO Exploit that Spybot finds on your machine is harmless.

              If you have used Spybot to remove the DSO exploit, it is gone. The entrys that appear when you subsequently run Spybot are a bug in Spybot; it does not change the register name somehow so as not to show. The register entrys are dead as well as the infection itself. Everyone who uses Spybot to kill DSO has the same problem. I am sure it will be corrected in the next upgrade release of Spybot.
              I moved my sites to Vacares Hosting. I've saved money, my hair is thicker, lost some weight too! Thanks Sly!

              Comment

              • riosluts
                Confirmed User
                • Sep 2003
                • 5250

                #8
                Originally posted by Mutt
                i had the same problem - it's nothing to worry about, it's a bug in Spybot, DSO Exploit that Spybot finds on your machine is harmless.

                If you have used Spybot to remove the DSO exploit, it is gone. The entrys that appear when you subsequently run Spybot are a bug in Spybot; it does not change the register name somehow so as not to show. The register entrys are dead as well as the infection itself. Everyone who uses Spybot to kill DSO has the same problem. I am sure it will be corrected in the next upgrade release of Spybot.
                ahh thanks for clarifying that up

                Comment

                • juicylinks
                  So Fucking Banned
                  • Apr 2001
                  • 122992

                  #9
                  Originally posted by Mutt
                  i had the same problem - it's nothing to worry about, it's a bug in Spybot, DSO Exploit that Spybot finds on your machine is harmless.

                  If you have used Spybot to remove the DSO exploit, it is gone. The entrys that appear when you subsequently run Spybot are a bug in Spybot; it does not change the register name somehow so as not to show. The register entrys are dead as well as the infection itself. Everyone who uses Spybot to kill DSO has the same problem. I am sure it will be corrected in the next upgrade release of Spybot.

                  Comment

                  • wdsguy
                    Ryde or Die
                    • Dec 2002
                    • 19568

                    #10
                    download webroot's spy sweeper

                    Comment

                    Working...