View Full Version : Help with spyware please.
planemad2 3rd September 2004, 07:29 I have recently downloded SPYBOT, and have run the Search and Destroy function.
Iniatially it found heaps of things, and I fearlessly (but maybe stupidly) deleted all of the things it found.
I have run it several times since, and it only finds one thing (5 items) called DSO Exploits?
Each time I delete this but it comes back each time, nothing else just DSO Exploits.
This is what it says about it..........
Company: Microsoft
Product: Internet Explorer
Threat: Security hole
Company URL:
http://www.microsoft.com/
Company product URL:
http://www.microsoft.com/windows/ie/
Company privacy URL:
http://www.microsoft.com/info/privacy.htm
Description
There's a security hole in IE allowing websites to execute code without asking you first. You can find more information at http://security.greymagic.com/adv/gm001-ie/
I also run Adaware and all it keeps finding, and heaps of times, is a thing called Data Miner, any clues on how to stop this too, please?
Naples Air Center, Inc. 3rd September 2004, 16:31 planemad2,
I want you to download Hijack This! (http://www.thespykiller.co.uk) and post the log file here. Do NOT make any repairs. (Hijack This! pulls up everything, including programs that are supposed to be in your computer.)
Take Care,
Richard
P.S. Have you loaded all the Security Updates from Microsoft, including SP2?
planemad2 4th September 2004, 23:31 The only things I can find there, are what I already said, and have tried, Spybot and Adaware?????? :confused:
Naples Air Center, Inc. 5th September 2004, 01:50 planemad2,
Did you download Hijack This!?
Take Care,
Richard
E-Liam 5th September 2004, 08:25 Hi Planemad,
Please download 'Hijack This!' from here (http://homepage.ntlworld.com/dvk01uk/downloads.htm), (Same site, but it narrows down the location of HJT for you) unzip, and place it in it’s own folder, (not in the temp folder, or on the desktop) doubleclick HijackThis.exe, and hit "Scan". When the scan is finished, click "Save Log", and copy and paste it in a reply.
This will give us a rundown of what’s going on in your PC. One of us here will be glad to analyse it for you. Don’t fix anything yourself yet, as a lot of the stuff on that list will be harmless or required.
Cheers
Liam
Speechless Two 5th September 2004, 15:04 planemad2 - don’t know if this is any help – taken from the letters section of the November 2004 issue of Windows XP: The Official Magazine just released – in reply to a similar query to yours…………
The DSO Exploit was patched a long time ago – back in March 2002 with Internet Explorer Cumulative Update MS02-015, so long as you visit Windows Update regularly you’ll have the fix to protect you from it. The current version of Spybot is checking through the registry for internet zone settings that could be used as a workaround, but not for whether you have the actual patch, and when it tries to change the registry key it’s setting it to the wrong value.
This means that each time it runs, Spybot finds that the security setting for “Download unsigned ActiveX controls” for the (normally) hidden My Computer zone in Internet Explorer is not set to disabled – this is why it gives you a warning. This will be fixed in the next update, but for the time being you can safely ignore the report: right-click on the entry and choose Ignore. If you don’t want to run a scan just to ignore it, choose Mode>Advanced>Settings>Ignore Products>Security>DSO Exploit, to tell Spybot not to check it.
Alternatively you could change the registry value yourself. Find HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 key, and change the 1004 value to 3 instead of 0.
Tony
planemad2 6th September 2004, 01:35 Thank you, I will do that, as everything else seems fine. :ok:
planemad2 6th September 2004, 09:28 Yes, that got rid of it from every scan, thank you. :ok:
Naples Air Center, Inc. 6th September 2004, 18:54 planemad2,
So all your problems are gone now?
Take Care,
Richard
planemad2 6th September 2004, 23:20 It would appear so, thanks. :ok:
I still get the Data Miner several times when I run an Adaware scan, but I will just live with that.
Naples Air Center, Inc. 7th September 2004, 00:15 planemad2,
If you just right click on the Data Miner, you will find those are just cookies that track your movement though a specific website.
Take Care,
Richard
planemad2 7th September 2004, 00:31 No worries. :ok:
|