View Full Version : DSO Exploit


ScRaMbLe
11-22-04, 07:48 AM
I cant get rid of the fucker. I'm running XP with spybot with latest updates and it keeps on coming up with DSO Exploit - 5 entries. It removes them but as soon as i log onto the net again its back. I've disabled my system restore, cleared all cookies, clean my cache, but it keeps coming back... and my computer is sending out megs of info everytime i log on. Can anyone help me out here, or shouldn't i be worried about it?

Voodoo Child
11-22-04, 09:56 AM
Was patched way back. Probably a false positive if you're all up to date.

cosmictraveler
11-22-04, 11:46 AM
I cant get rid of the fucker. I'm running XP with spybot with latest updates and it keeps on coming up with DSO Exploit - 5 entries. It removes them but as soon as i log onto the net again its back. I've disabled my system restore, cleared all cookies, clean my cache, but it keeps coming back... and my computer is sending out megs of info everytime i log on. Can anyone help me out here, or shouldn't i be worried about it?


If you have Internet Explorer go to this site and do the virus scan for free. It also will remove the trojans. You will have to DELETE them if the scan doesn't clean them. Let it load the engine to start the process.

http://housecall.trendmicro.com/

grazzhoppa
11-22-04, 01:53 PM
Was patched way back. Probably a false positive if you're all up to date.
That's exactly right. I'm not sure exactly when it was patched, but if you have Service Pack 2, I almost positive you're covered. There's a bug in the SpyBot program that makes it appear as a threat even when it's fixed.

Here is an explanation about the DSO exploit and some info about the SpyBot bug. (http://ask-leo.com/whats_a_dso_exploit_and_how_do_i_get_rid_of_it.htm l)

ScRaMbLe
11-22-04, 03:15 PM
thanks for the help guys! BTW whats a healthy normal rate of info my computer should be sending out?, not that i'm paraniod, but i'm still on narrowband so i don't need it goin any slower than it is already!

...and cosmic, good to see ya still around dude!

Stryder
11-22-04, 08:05 PM
If your PC is outputting Data it should only be a little, usually just enough to keep your connection syncronised with your ISP. A few bytes here and there.

The thing is that you might be running some software or have downloaded software that has started some services up to run at startup. You might want to look into what services you are running and work out which ones you can turn off, especially if you use P2P share-network software since it's usually the responsible party for clandestine network usage.

ScRaMbLe
11-22-04, 09:25 PM
I reformatted my HD a couple of weeks ago and have hardly reinstalled anything. Used to run kazaa but got no p2p at the moment. Still sending about 5 meg in 20 min. I'll look into my startup, but 75% of the stuff in there i wouldn't know what it is, or does!

ScRaMbLe
11-22-04, 10:28 PM
Used a program called startup mechanic which identified an exe file opening on startup which turned out to be AIMWIN virus. Strange that neither spybot or norton picked it up (both on current updates). Little fucker was hiding away in a folder in windows, deleted it and that seems to have slowed sending down quite a bit. Cheers!

§outh§tar
11-22-04, 11:04 PM
lol.. thats what you get for using norton.

uninstall it now.