PDA

View Full Version : DSO exploit



mikeyb20
2006-01-03, 19:08
Can't get rid of DSO exploit - I've run Spybot and it identifies DSO under five registry entries, I then hit the button for fix the problem, it tells me it's fixed but when I run sybot again its; back - does anyone know how to kill DSO from systems completeley

tashi
2006-01-03, 20:12
Hello.
Please open Spybot>Help>About
Check the version and latest detection update.

If you are using Spybot-S&D version 1.3:
Spybot-S&D 1.4 Final has been released.
Uninstalling Previous Spybot-S&D (http://www.safer-networking.org/en/faq/27.html)
Spybot-S&D Version 1.4 Download (http://www.spybot.info/en/download/index.html)
Version 1.4 :Systems Supported (http://www.safer-networking.org/en/spybotsd/index.html)

Tutorial (http://www.spybot.info/en/tutorial/index.html)

Regards.

mikeyb20
2006-01-16, 20:56
Have downloaded 1.4 version but it demands you update when you get to check for problems. But when you hit search for updates it just freezed - message says it maybe that server is just busy - but I have tried this for 5-10 mins with no luck

tashi
2006-01-17, 02:13
Hello.
Are you still having a problem updating?

If so close Spybot, re-open, check for updates before checking for problems.

Sometimes the servers are very busy; if you receive a "Bad Checksum" error during updates change the download server and click "Download Updates" again.

If this does not help please download the updates manually:
http://www.safer-networking.org/en/download/index.html

Detection updates 2006-01-13 - product description

md5: 5622814E9A126BA7D15093388B33BE8B
This updates the detection rules. Only needed if you do not want to use the update function integrated into Spybot-S&D.
Cheers.

mikeyb20
2006-01-31, 21:15
Hi, keep having to remove the following problems whenever running a check for problems on spybot:

Windows security centre antivirus disable notfy
Windows security centre firewall disable notfy

What are these and why do they reappear?

md usa spybot fan
2006-01-31, 21:37
If you go into Start > Control Panel > Security Center > Resources (on the left hand side of the window – expand if necessary) > click "Change the way Security Center alerts me". This brings up an "Alert Setting" window.

There are three possible alerts:
Firewall
Alert me if my computer might be at risk because of my firewall settings
Automatic Updates
Alert me if my computer might be at risk because of my Automatic Updates settings
Virus Protection
Alert me if my computer might be at risk because of my virus protection software settings
I believe that you will find that the first and third items are unchecked. This is the cause of the following Spybot detections:


Windows Security Center.FirewallDisableNotify: Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify!=dword:0

Windows Security Center.AntiVirusDisableNotify: Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0
These alerts could have been turned off manually or by some security solution (such as McAfee Security Center or Norton Internet Security that turn off these alerts and handle alerts themselves) or by malware. Spybot-S&D is alerting that there is an abnormal setting in the Windows Security Center that requires your attention.

For more information see:
Spybot & Windows Security Centre.....warning
http://forums.spybot.info/showthread.php?t=75

mikeyb20
2006-02-01, 08:31
Hi, thanks for that, Ive gone into security centre but the change the way security centre alerts me is greyed out and I can't click on it. Any ideas?

spybotsandra
2006-02-01, 10:27
Hello,

After a scan with Spybot

* Expand the detection if necessary (+ to the left of the detection).
* Select the item (entry) that you want to exclude by left clicking on it to highlight it.
* Then right click on highlighted detection.
* Select from the list of options in the menu.

If you would like to do it this way Go into Spybot > Mode > Advanced mode > Settings > Ignore products > Security tab and check the items there. Make sure you are checking the correct items, don't check all of them You can drag the PRODUCT section to ensure you see the full path.

Best regards
Sandra
Team Spybot

noel-pr7
2006-02-06, 20:28
Can't get rid of DSO exploit - I've run Spybot and it identifies DSO under five registry entries, I then hit the button for fix the problem, it tells me it's fixed but when I run sybot again its; back - does anyone know how to kill DSO from systems completeley

this was a major problem in spybot 1.3 and was fixed in 1.4. the problem only occured on some (and not all) of the computers I've tested spybot 1.3 on.