I've been having a problem with OE and I also had the Exploit virus and i posted about 2 weeks ago and you told me what to do only it the tool you described wasn't there. I couldn't find any repair tool for OE on my computer so I just ended up reformatting my c-drive. I thought it would fix the problem. Well my computer was still freezing up on me and i still couldn't get OE so I reformatted again today and I got this message after i restarted....''Environment variables were found in the legacy files Autoexec.BAT and/or Config.system and the variables were moved to the Windows Registry''. When i ran spybot it found a DSO Exploit problem on my computer. Also I found in my cookies a database file that I can't delete from my computer and I think it's related to the that message I got. How can i get rid of it? And how can i make sure my registry key files don't have Exploit? I don't quite understand what the Exploit virus is all about and I'm afraid that I have it on my computer even though Spybot supposedly fixed it.

[Reply or follow-up to this message]

This is a trojan that causes Internet Explorer to display one location in the Address bar, but actually load the content from a different site. Such URL spoofing can result in attackers creating forged versions of legitimate sites in order to steal account information, personal information, etc. You should be running a good AV program, Spybot, Adaware, Spyware Guard and some kind of firewall ( I like Outpost, but there are many). This virus generally does not cause system changes and is considered a "low" threat. Your reformat data is confusing. Did you reinstall ME as well? Are there other partitions? etc.


On Tuesday, January 27, 2004 at 7:25 pm, Alanna wrote:
>I've been having a problem with OE and I also had the Exploit virus and i posted
>about 2 weeks ago and you told me what to do only it the tool you described wasn't
>there. I couldn't find any repair tool for OE on my computer so I just ended up
>reformatting my c-drive. I thought it would fix the problem. Well my computer was
>still freezing up on me and i still couldn't get OE so I reformatted again today
>and I got this message after i restarted....''Environment variables were found in
>the legacy files Autoexec.BAT and/or Config.system and the variables were moved to
>the Windows Registry''. When i ran spybot it found a DSO Exploit problem on my computer.
> Also I found in my cookies a database file that I can't delete from my computer
>and I think it's related to the that message I got. How can i get rid of it? And
>how can i make sure my registry key files don't have Exploit? I don't quite understand
>what the Exploit virus is all about and I'm afraid that I have it on my computer
>even though Spybot supposedly fixed it.

[Reply or follow-up to this message]

This is the first I've seen it described as a trojan, and I've looked at a lot of sites trying to find out what to do. And they all say to just download the windows update and that's it. I deleted the files that it was in and because of freezing and error message pages I just reformated my hard drive. By that I mean I put the original disk that came with the computer and had it redo my hard drive. But then I got that message and I have this data file in my cookies folder that I can't get rid of. When I saw the data file there I reformated again to try to rid my computer of it but it's still there and I have no idea how to get rid of it but I know this--it ain't good. I have Norton Internet Security on my computer plus the free version of AVG and spybot and AdAware. After I reformated, Spybot caught that I had a DSO Exploit on my computer and I told it to fix it....but that file is still in my cookie folder. Thanks


On Wednesday, January 28, 2004 at 7:27 pm, mistergil wrote:
>This is a trojan that causes Internet Explorer to display one location in the Address
>bar, but actually load the content from a different site. Such URL spoofing can
>result in attackers creating forged versions of legitimate sites in order to steal
>account information, personal information, etc. You should be running a good AV program,
>Spybot, Adaware, Spyware Guard and some kind of firewall ( I like Outpost, but there
>are many). This virus generally does not cause system changes and is considered a
>"low" threat. Your reformat data is confusing. Did you reinstall ME as well? Are
>there other partitions? etc.
>
>

[Reply or follow-up to this message]

Here is a detailed report on the virus: http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100927 The file you are trying to get rid of may also be in your system restore files. Here is how to disable sys/res: http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm After it is disabled run the adaware/spybot/avg (and anything else you may have) again to attempt to clean it out. The reason I'm confused is that if you performed a clean reformat and reinstall, the sys/res section should have been clean. It leads me to think that the questionable item is on your recovery cd.


On Thursday, January 29, 2004 at 12:22 pm, Alanna` wrote:
>
>This is the first I've seen it described as a trojan, and I've looked at a lot of
>sites trying to find out what to do. And they all say to just download the windows
>update and that's it. I deleted the files that it was in and because of freezing
>and error message pages I just reformated my hard drive. By that I mean I put the
>original disk that came with the computer and had it redo my hard drive. But then
>I got that message and I have this data file in my cookies folder that I can't get
>rid of. When I saw the data file there I reformated again to try to rid my computer
>of it but it's still there and I have no idea how to get rid of it but I know this--it
>ain't good. I have Norton Internet Security on my computer plus the free version
>of AVG and spybot and AdAware. After I reformated, Spybot caught that I had a DSO
>Exploit on my computer and I told it to fix it....but that file is still in my cookie
>folder. Thanks
>
>
>
>

[Reply or follow-up to this message]

Forgot- turn system restore back on after you are done.


On Thursday, January 29, 2004 at 3:38 pm, mistergil wrote:
>Here is a detailed report on the virus:
>http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100927
>The file you are trying to get rid of may also be in your system restore files. Here
>is how to disable sys/res:
>http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
>After it is disabled run the adaware/spybot/avg (and anything else you may have)
>again to attempt to clean it out. The reason I'm confused is that if you performed
>a clean reformat and reinstall, the sys/res section should have been clean. It leads
>me to think that the questionable item is on your recovery cd.
>

[Reply or follow-up to this message]

I was wondering the same thing--that it's somehow on my original disk but how would it get there, If you use it to wipe out everything that's on your hard drive? When I did the online scan last night i disabled my system restore and it showed no viruses. But that data file in my cookies makes me question what is going on. That should not be there and I can't get rid of it.


On Thursday, January 29, 2004 at 3:56 pm, mistergil wrote:
>Forgot- turn system restore back on after you are done.
>
>

[Reply or follow-up to this message]

If the recovery disk is not taking care of it then it's not reformatting everything or it is, and then putting it back on. It's also possible that some other software that you are adding after the recovery is doing it. There may be a partition on your hd that you are not aware of, possible I guess. You could reformat from a boot disk and then put the OS in and it should be clean. You'd need a OS disk and any drivers or software that your peripherals required. Before you did that you could use a boot disk to examine the partition information and see what's really there. Put your floppy boot disk in when the unit is turned off and restart it with it in. Let it run until you get the A:/ prompt. Type in fdisk and hit enter. You'll get a menu. one of the choices is something like "view partition data" or such. Enter the number and hit the enter key. Write it down if necessary and exit. Take out the floppy and reboot. See if this matches with what windows shows in my computer. I'm assuming that you have already obtained any security patches from MS for OE,IE, ME as well as any upgrades.


On Thursday, January 29, 2004 at 6:37 pm, Alanna wrote:
>
>I was wondering the same thing--that it's somehow on my original disk but how would
>it get there, If you use it to wipe out everything that's on your hard drive? When
>I did the online scan last night i disabled my system restore and it showed no viruses.
> But that data file in my cookies makes me question what is going on. That should
>not be there and I can't get rid of it.
>

[Reply or follow-up to this message]

DSO Exploit If this is a problem that is only showing up in spybot search and destroy, after you have run spybot to rid your computer of it, then you haven't got a problem and can be ignored.


On Tuesday, January 27, 2004 at 7:25 pm, Alanna wrote:
>I've been having a problem with OE and I also had the Exploit virus and i posted
>about 2 weeks ago and you told me what to do only it the tool you described wasn't
>there. I couldn't find any repair tool for OE on my computer so I just ended up
>reformatting my c-drive. I thought it would fix the problem. Well my computer was
>still freezing up on me and i still couldn't get OE so I reformatted again today
>and I got this message after i restarted....''Environment variables were found in
>the legacy files Autoexec.BAT and/or Config.system and the variables were moved to
>the Windows Registry''. When i ran spybot it found a DSO Exploit problem on my computer.
> Also I found in my cookies a database file that I can't delete from my computer
>and I think it's related to the that message I got. How can i get rid of it? And
>how can i make sure my registry key files don't have Exploit? I don't quite understand
>what the Exploit virus is all about and I'm afraid that I have it on my computer
>even though Spybot supposedly fixed it.

[Reply or follow-up to this message]

http://support.microsoft.com/default.aspx?scid=kb;en-us;262786

[Reply or follow-up to this message]

Try switching your browser. I'm running Firefox and have found no Exploit.


On Thursday, January 29, 2004 at 12:22 pm, Alanna wrote:
>
>This is the first I've seen it described as a trojan, and I've looked at a lot of
>sites trying to find out what to do. And they all say to just download the windows
>update and that's it. I deleted the files that it was in and because of freezing
>and error message pages I just reformated my hard drive. By that I mean I put the
>original disk that came with the computer and had it redo my hard drive. But then
>I got that message and I have this data file in my cookies folder that I can't get
>rid of. When I saw the data file there I reformated again to try to rid my computer
>of it but it's still there and I have no idea how to get rid of it but I know this--it
>ain't good. I have Norton Internet Security on my computer plus the free version
>of AVG and spybot and AdAware. After I reformated, Spybot caught that I had a DSO
>Exploit on my computer and I told it to fix it....but that file is still in my cookie
>folder. Thanks
>
>
>
>

[Reply or follow-up to this message]

im running firefox and spybot is repeatedly finding DSO exploit. tis annoying. doesn't seem to cause any major problems but could be part of what slowing my comp *shrug* anyway hope ya fix urs. xx

[Reply or follow-up to this message]

"DSO Exploit" is NOT a virus, it doesn't hurt or do anything to change or modify your computer at all. I am an experienced technician at Microsoft and it is nothing except a flaw. DO NOT WORRY ABOUT IT!!!! IGNORE IT!!


On Tuesday, January 27, 2004 at 7:25 pm, Alanna wrote:
>I've been having a problem with OE and I also had the Exploit virus and i posted
>about 2 weeks ago and you told me what to do only it the tool you described wasn't
>there. I couldn't find any repair tool for OE on my computer so I just ended up
>reformatting my c-drive. I thought it would fix the problem. Well my computer was
>still freezing up on me and i still couldn't get OE so I reformatted again today
>and I got this message after i restarted....''Environment variables were found in
>the legacy files Autoexec.BAT and/or Config.system and the variables were moved to
>the Windows Registry''. When i ran spybot it found a DSO Exploit problem on my computer.
> Also I found in my cookies a database file that I can't delete from my computer
>and I think it's related to the that message I got. How can i get rid of it? And
>how can i make sure my registry key files don't have Exploit? I don't quite understand
>what the Exploit virus is all about and I'm afraid that I have it on my computer
>even though Spybot supposedly fixed it.

[Reply or follow-up to this message]

• Search this forum
• Start a new thread on a different subject

• Report abuse of the forum