Spybot SD - DSO exploit, driving me nuts!!

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by HUDIK, Jun 6, 2004.

  1. HUDIK

    HUDIK Sergeant

    Have run Spybot SD quite a few times now and this item still comes up even though it says it has been fixed. What can I do?? Thought I had all the MS Updates for IE, and now there is this nasty that can apparently execute code. Does anybody know if Spybot will get a fix for this, or is there a reg entry somebody can give me. If somebody gives me a reg entry, please explain in detail what I have to do.
    This is the result I get in Spybot:

    DSO Exploit: Data source object exploit (Registry change, fixed)
    HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

    --- Spybot - Search && Destroy version: 1.3 ---
    2004-05-25 Includes\Cookies.sbi
    2004-05-29 Includes\Dialer.sbi
    2004-05-28 Includes\Hijackers.sbi
    2004-05-28 Includes\Keyloggers.sbi
    2004-05-28 Includes\Malware.sbi
    2004-05-04 Includes\Revision.sbi
    2004-04-12 Includes\Security.sbi
    2004-05-28 Includes\Spybots.sbi
    2004-05-28 Includes\Trojans.sbi
    2004-05-12 Includes\LSP.sbi
    2004-05-24 Includes\Tracks.uti

    Would really appreciate getting this resolved. Thanks!!
     
  2. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

  3. HUDIK

    HUDIK Sergeant

    Thanks MajorAttitude!!

    Opened the link and read every post. Came to this one and would like your advice what is the best route to take. Checked my security and have 'download unsigned ActiveX Controls' -disabled. Wait or use regedit to fix it. What would you do??
    The second choice would be to use a REG file to fix it. Open notepad and paste the contents of this block into is:


    CODE
    REGEDIT4

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0]
    "1004"=dword:00000003


    Save that to some place on your disk as something like: FIXDSO.REG

    Then you can simply double click that file and merge the change (fix) into your registry. This will fix the one for the "current user" you are logged into your system as. There is less chance of making an error this way. Note that it is always recommended to backup your registry before making changes to it. (If you are unsure about doing that, then I refer you back to my main recommendation above and wait for Spybot to fix it.)

    Finally, in regedit you can right-click on the bad 1004 key in the right panel and select Delete. Then in a blank section in that same right panel in regedit, do a right-click and add a "New" > "DWORD" value. Name the new DWORD value 1004 (like the one you just deleted). When it is created double-click on it and enter a value of 3 into it. If you have multiple versions of this under different users on your system, you can do the same thing for each of those.

    But again, this really isn't worth any significant effort or risk to fix. It is a non-issue if you are current at Windows Update and so it is easiest and best to wait for the Spybot fix.

    This post has been edited by LowWaterMark on May 17 2004, 09:31 PM

    As I said before thought I had all the updates, but now am not sure............
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds