[RESOLVED] Spybot-S&D v1.3 can't get rid of DSO Exploit

[206WRC]

I just got version 1.3 of Spybot-S&D today and ran a check for problems. It found about 7 problems and after I fixed them I ran a new check. It now says that there is a DSO Exploit (5 entries). When I click the Fix Selected Problems button nothing happens - at all. When I right-click DSO Exploit and select More details>Jump to location, again, nothing happens (I'm probably misunderstanding what Jump to location actually does but I just want to get more info. as to what this DSO Exploit actually is).

I would appreciate any input on clarifying what is going on and what I need to do. Thank you.

[DuaneB]

If all your critical updates are installed, you are protected against DSO Exploits and the alert in Spybot is just a nuisance (actually, it's a false positive). You can get rid of the annoying alert by doing the following:

1. Open Spybot and select 'advanced' mode.
2. Select 'settings' in the left column.
3. Select 'ignore product' in the left column.
4. Select 'security' tab.
5. Place check mark in box beside DSO Exploit.
6. Close program
7. Open Spybot and run a scan.

[Mr. Clean]

Originally posted by DuaneB
If all your critical updates are installed, you are protected against DSO Exploits

This is true. However, if you insist on removing it completely so it never shows up in Spybot again, here's how:

(Make sure you create a backup of your registry before trying this.)


DSO Exploit Fix:
1-First of all, note down all the DSO registry keys supplied by SpyBot's search.
2-If it is enabled, disable system restore from the control panel >> system.
3-Open the registry editor (regedit.exe).
4-Using the information you wrote down in step 1, navigate to the zones\0\ keys.
5-Find the 1004 REG_SZ value in the right pane and delete it.
6-Right-Click the right-hand pane New >> DWORD Value - Name it 1004.
7-Double-Click the newly created DWORD and give it a value of 3.
->Repeat steps 4 to 7 for every error reported in SpyBot.
8-You may now re-enable system restore if you wish to do so.

Hope that helps!

[206WRC]

Thank you very much for the detailed replies. Now that I think about it, I do remember seeing something about DSO Exploits in the Spybot tutorial, but that was about 6 months ago when I first got Spybot (v1.2).

Now my problem is, I can't find the Advanced Mode for Spybot. Some of you may remember my having this same type of problem in this thread. Just to be sure, I uninstalled version 1.2 of Spybot using the Uninstall link in Start>Programs>Spybot and my machine has been restarted. I have downloaded & installed v1.3 anew but I now cannot find the Advanced Mode tab within Start>Programs>Spybot! Not again!

I'm fairly sure that I am just overlooking something but right now my brain is tied up in knots so any help that is kindly offered will be greatly appreciated. Thank you.

[Mr. Clean]

I have 1.3 installed. I can access advance mode by clicking Mode >> Advanced.

[DuaneB]

Open Spybot S&D > click 'Mode' (at the top of the main window) > click 'Advanced Mode'

[206WRC]

Thank you DuaneB & Mr. Clean - again. I see that Spybot has simplified access to the Advanced Mode with version 1.3. I was sure hoping that it would be an easy fix.

Now I'm embarrassed to say that I never even saw the "Mode" tab in the Spybot window!!