DSO Exploit Security Hole in IE

According to www.greymagic.com/adv/gm001-ie/ to which my spybot is
redirecting me with this spyware, there is a security hole allowing websites
to execute code without asking you first. Collecting information on what is
being put on forms and info on webpages.
Is there a current patch to fix this?

"Carolyn" <> wrote in message news:C81AB9E3-6675-451F-B080-...
> According to www.greymagic.com/adv/gm001-ie/ to which my spybot is
> redirecting me with this spyware, there is a security hole allowing websites
> to execute code without asking you first. Collecting information on what is
> being put on forms and info on webpages.
> Is there a current patch to fix this?


You have two choices...

1) Turn your IE security settings up to high, then whenever a site you visit does
not work - most do not - enter the options menu and mark it as "trusted". Then
pray that someone does not break into their server and install spyware on
their site.

2) Switch to another browser. I use FireFox, and won't switch back.

Or you could even do this:

BACK UP REGISTRY FIRST.

It seems that Spybot removes the DSO exploit but doesn't clean the registry.
Hence the reappearance.

Start>Run type 'regedit' (without the qoutes)

Follow to the keys that spybot catches as dso exploits, for me it was 5 of
them, eg.

HKEY_USERS\S-1-5-18\Software|Microsoft\Windows\Current Version\Internet
Settings\Zones\0\1004!=W=3

After opening zones and clicking on '0' look to the right window, under
'name' is the key '1004' and the type is REG_SZ simply right click and
delete this REG_SZ value.

Then right click and create new>DWORD Value, name it 1004, right click on
that and goto modify, give it the Hex Value of 3, Click ok.

You may have to restart your pc for changes to take effect... i didn't.

Run Spybot again and you will have one less dso exploit.... repeat for each
of the other values flagged in spybot (should all be 1004)...

Worked for me.


"BeamGuy" <> wrote in message
news:O$...
>
> "Carolyn" <> wrote in message
news:C81AB9E3-6675-451F-B080-...
> > According to www.greymagic.com/adv/gm001-ie/ to which my spybot is
> > redirecting me with this spyware, there is a security hole allowing
websites
> > to execute code without asking you first. Collecting information on what
is
> > being put on forms and info on webpages.
> > Is there a current patch to fix this?
>
>
> You have two choices...
>
> 1) Turn your IE security settings up to high, then whenever a site you
visit does
> not work - most do not - enter the options menu and mark it as "trusted".
Then
> pray that someone does not break into their server and install spyware on
> their site.
>
> 2) Switch to another browser. I use FireFox, and won't switch back.
>
>