Re: dso exploit

From: anonymous (anonymous_at_discussions.microsoft.com)
Date: 09/30/04 

Date: Thu, 30 Sep 2004 01:03:53 -0700

>-----Original Message-----
>the dso exploit does not end in a 'w3'. does this mean
>it IS something to worry about. It did not show up in
>the hijackthis log, but i am sure it will show up again
>in a day or two when i run spybot.

IGNORE IT! It's been well-documented that it's a false
positive by Spybot Search & Destroy. As long as your
computer is fully patched through windowsupdate.com, you
have nothing to worry about.

Spybot leaves this false positive (instead of "fixing" it
even after all this time of knowing of it) for a specific
reason: many rogue anti-spyware apps are clones of Spybot.
In other words, if you use a rogue app that tells you of a
DSO exploit, they have just been busted as a Spybot clone.

Relevant Pages

  • Re: dso exploit
    ... your response was most helpful. ... >>it IS something to worry about. ... >positive by Spybot Search & Destroy. ... >DSO exploit, they have just been busted as a Spybot ...
    (microsoft.public.security)
  • Re: Security Hole in IE
    ... If your machine is up to date with all Windows "Critical" Updates, ... need to worry about the DSO Exploit. ... You can configure Spybot to ignore ... > It describes it as a DSO exploit and wants me to make a regedit. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: DSO Exploit
    ... The people behind Spybot know about this DSO ... > spyware apps are clones of Spybot. ... > just been busted as a Spybot clone. ...
    (microsoft.public.security)
  • Re: IEXPLORE.exe has generated errors and will be closed by Windows
    ... If you have been installing updates for Windows and IE, you can have Spybot ... Do a google search for +spybot +dso +exploit. ... > My operating software is Windows 2000 Professional ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: DSO Exploit
    ... DSO Exploit means a lot of different ... It looks to me like Spybot is just ... Installing IE6 and Office XP / 2002 or the Outlook Security Update ... Because of these attack vectors, you're probably not going to be too likely ...
    (microsoft.public.security)