PDA

View Full Version : DSO exploit?



Agnihotra
2005-12-04, 20:58
Hi, forgive me if my question makes eyes roll but I'm new to Spybot and I'm not sure about a particular "problem" that comes up when I scan my computer.

Here it is:

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

there are several of these particular DSO Exploit's but since they seem to be registry related I don't want to push the button without knowing what I'm doing.

and here is one other that I get:

Alexa Related: What's related link (Replace file, nothing done)
C:\WINDOWS\Web\related.htm

Thank you for any help you provide and thanks for providing they great spyware software!:bigthumb:

md usa spybot fan
2005-12-04, 21:21
What Windows OS are you running? Also please run the scan again. After you are done, right click on the results list and select "Copy results to clipboard" then paste the clipboard into a new post.

Agnihotra
2005-12-04, 23:28
Hello and thank you for your help spybot fan. I'm running XP pro.

RESULTS:

Alexa Related: What's related link (Replace file, nothing done)
C:\WINDOWS\Web\related.htm

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-21-1801674531-1957994488-762179075-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3


--- Spybot - Search && Destroy version: 1.3 ---
2004-05-12 Includes\Cookies.sbi
2004-05-12 Includes\Dialer.sbi
2004-05-12 Includes\Hijackers.sbi
2004-05-12 Includes\Keyloggers.sbi
2004-05-12 Includes\LSP.sbi
2004-05-12 Includes\Malware.sbi
2004-05-12 Includes\Revision.sbi
2004-05-12 Includes\Security.sbi
2004-05-12 Includes\Spybots.sbi
2004-05-12 Includes\Tracks.uti
2004-05-12 Includes\Trojans.sbi

md usa spybot fan
2005-12-04, 23:56
You are running Spybot-S&D 1.3 (and old version) with no updates since that version was introduced 2004-05-12 (over 1 and 1/2 years ago).

I suggest that you:
Upgrade to Spybot-S&D 1.4. You can find download mirrors here:
Mirror selection
Download Spybot-S&D
http://www.spybot.info/en/mirrors/index.html

FAQ - Frequently Asked Questions
How to uninstall?
http://www.safer-networking.org/en/faq/27.html


Make sure that you update before running a scan (there is a step in the installation process to download updates - the latest updates are 2005-12-02).

If you run into problems or need additional help, feel free to post back.