Hi,
I have had that stupid DSO Exploit until 30 minutes ago. I ran Spybot & have managed to get rid of it by getting into regedit & replacing value in the folder 1004 from 0 to 3 (5 times, that is).
However, although they are all gone, I cannot get my Home page to remember my setting. It constantly goes to "about:blank" which is not even blank!!
It displayes some some page with all non-operational links to all types of services.

Anyone, any idea how to fix this?

Thanks

argeldeggy

ok senior Expert, lets see what you know.

What is the name of the patch?
When was the patch created?

if you can not answer these questions, then you don't even know if a patch was ever created.

I think you are just going off what other people said.

if not, here's you chance to school me.

have a nice day!!!!

psi42

See microsoft's security bulletin MS02-015.

I apologize if I may have appeared hostile in my previous post. I am not an "expert," nor do I claim to be. The title, "Senior expert," appears because of my post count, and I can't change it.

I'm sure you have noticed there are many many DSO Exploit-related threads on this board, including one that is eleven pages long. This has been going on for a long time, and the root of the problem is that people don't read the entire thread and then start yelling about how pompous "us experts" are.


Now I'll admit flaming can be good for your health, especially when you get frustrated, but if I get flamed, I'm going to flame back--such is life.

Have a nice day.

~psi42

argeldeggy

thanks for getting back to me, i  appreciate it.
I APOLOGIZE for the rudeness. I'll make sure to investigate next time.

you have a nice day!

TechMD

does anyone have a solution that actually fixes the exploit? the registry change does not fix it. the patch mentioned above will not work with IE6 SP1 and SP1 does not address the exploit. if you have any doubts you can test your solutions effectiveness at the following website:

http://www.greymagic.com/security/advisories/gm001-ie/

i made the registry changes and updated Spybot S&D. Spybot S&D no longer detects the exploit, but the exploit remains...

check it out...