perezm
asked on
DSO Exploit
I am running SpyBot search and destroy. It shows DSO Exploit, and shows that the registry for windows was changed. Under that it shows HKEY users and gives long numbers. Does anyone know what's going on here and how to get it back to normal?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
DSO Exploit was fixed on several computers (win98, WIN Me and both forms of XP) as follows (Do it step by step)
1) Have onbarod Adaware 6.0 and spybot (they work together quite well) - you can download easily from Websites note in this Exchange
2) Install them, update them, run them (Spybot first, then Adaware); immunize your system with Spybot;
3) Turn your computer off; restart; run Spybot again. If it still detects DSO Exploit - click the + buttom to open to all noted erros - leave them there
4) Run rededit (Start, run, type in regedit ) it should open a DOs window - DON'T touch it; leave it alone;
5) Go back to your still open Spybot window, right click each of the subitems under DSO Exploit. Menu opens; choose "Show More Details", "jump to" ; let it run until it stops on the registry entry item (almost all were 1004 on all machines we fixed); DELETE only that item.
6) Got back and do the same for all other subitems in Spybot.
7) When done, click Fix selected items; - IT will tell you it CANNOT as they are no longer there. That's ok - if it asks to run on restart- click ok; DO NOT RESTART COMPUTER
8) Close Spybot.
9) if an ME or XP computer; go to System Restore (Start, Settings, Control Panel, System - System Restore Tab- turn off system restore on all disks (click the box)- let it run until it comes to rest.
10) Dump your reclycle bin(s) and Run Disk clean - System tools - clean them all
11) Restart Computer
12) Run Spybot and Adaware; immuize system again.
13) TURN BACK on the system restore settings (Reverse of #9 above).
You should get happy smiles from then on. I also ran scan disk and defragged drives but I am a bits nuts anyway.
Good luck, RobertMMayer
1) Have onbarod Adaware 6.0 and spybot (they work together quite well) - you can download easily from Websites note in this Exchange
2) Install them, update them, run them (Spybot first, then Adaware); immunize your system with Spybot;
3) Turn your computer off; restart; run Spybot again. If it still detects DSO Exploit - click the + buttom to open to all noted erros - leave them there
4) Run rededit (Start, run, type in regedit ) it should open a DOs window - DON'T touch it; leave it alone;
5) Go back to your still open Spybot window, right click each of the subitems under DSO Exploit. Menu opens; choose "Show More Details", "jump to" ; let it run until it stops on the registry entry item (almost all were 1004 on all machines we fixed); DELETE only that item.
6) Got back and do the same for all other subitems in Spybot.
7) When done, click Fix selected items; - IT will tell you it CANNOT as they are no longer there. That's ok - if it asks to run on restart- click ok; DO NOT RESTART COMPUTER
8) Close Spybot.
9) if an ME or XP computer; go to System Restore (Start, Settings, Control Panel, System - System Restore Tab- turn off system restore on all disks (click the box)- let it run until it comes to rest.
10) Dump your reclycle bin(s) and Run Disk clean - System tools - clean them all
11) Restart Computer
12) Run Spybot and Adaware; immuize system again.
13) TURN BACK on the system restore settings (Reverse of #9 above).
You should get happy smiles from then on. I also ran scan disk and defragged drives but I am a bits nuts anyway.
Good luck, RobertMMayer
ASKER
You've got the right problem. As I understand it, there is no way to get rid of it until Microsoft creates a patch to fix it. Is this correct??
I have run HiJack and have a long list of things that it runs. Is there a way to know what I can get rid of??
Please Advise.
Thanks.