DSO Exploit

[janky]

Na het scannen met Spybot krijg ik steeds deze files te zien.

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-21-3562098725-386400610-2647226308-1008\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

Na fixen en reboot staan ze er weer net zo na een scan.

Hoe en waarmee kan ik dit toch verwijderd krijgen?

 

[H@ns]

Dat is een bug in Spybot S&D. Je mag ze negeren. Ik heb gehoord dat ze die in de beta versie 1.3.1 al proberen te fixen/gefixt hebben. Ik zou nog even wachten tot de officiele 1.3.1 uit is.

 

[buffy]

You might want to try the Beta Main application update (ßMain update 1.3.1) since this contains the fix for the DSO Exploit issue. I have tested it by setting my registry entries to the 'broken' string values with null ("") data and the original REG_DWORD values with data of 0x0. The 1.3.1 update found and fixed these values by changing them to REG_DWORD values with data of 0x3.

To see this update you'll have to enter 'Advanced Mode' and then Click the 'Settings' button near the bottom and then 'Settings' again within the list in the left pane. Then find and check 'Display available beta versions.' in the 'Web update' section. I don't recommend the Beta Definitions unless you are very adventurous, they often have False Positives (errors).

If you are not comfortable with Beta releases, please wait for the official release which I can finally say should be 'real soon now'. The only way I know to back out is to uninstall/re-install the original 1.3, so be prepared for this if you have other issues.

http://forums.net-integration.net/index.php?showtopic=17159&st=60

 

[janky]

Oke, bedankt is duidelijk.
Wacht op de nw.versie 1.3.1