• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 652
  • Last Modified:

Please Explain Why Spybot Search & Destroy always finds these same 5 files!!!

Points go out to the best explanation of why.....

Everytime I run Spybot S & D, it always finds the same  five  "Data Expliots" !!!

Everytime iI remove them, then seach and it finds them again.   (This happens on Win NT, 2003 Server, XP)      



DSO Exploit: Data source object exploit (Registry change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
  HKEY_USERS\S-1-5-21-1085031214-602609370-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
  HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
  HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3
0
pdoriley
Asked:
pdoriley
  • 2
1 Solution
 
LucFEMEA Server EngineerCommented:
Hi pdoriley,

It's very common that Spybot S&D keeps finding DSO exploids, please see this page:
http://www.computing.net/windowsxp/wwwboard/forum/104837.html

From responce no. 10:
Since the injected <object> runs in the "My Computer" Zone changing the Internet Zone's settings didn't affect it, but changing the correct zone's settings will prevent this exploit from running.

Here is the registry information:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0

Change the value of "1004" (DWORD) to 3.

Greetings,

LucF
0
 
blue_zeeCommented:

It's a known bug in Spybot S&D.

It's expected to be solved in the next release. Meanwhile, just ignore it.

Zee
0
 
blue_zeeCommented:

Thank you.

Latest news on this:

>>Please note the current beta release of the application (v 1.3.1b) corrects the DSO bug. If you are not comfortable with installing the beta ignore the DSO items until the final is released. Again, please note it is an application update and not an includes update that fixes this bug<<

From:

http://forums.net-integration.net/index.php?showtopic=17159

Zee
0

Featured Post

Will You Be GDPR Compliant by 5/28/2018?

GDPR? That's a regulation for the European Union. But, if you collect data from customers or employees within the EU, then you need to know about GDPR and make sure your organization is compliant by May 2018. Check out our preparation checklist to make sure you're on track today!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now