Virus / Adware Question

[jardinero]

Can someone answer my question regarding viruses, etc.?

I've had so much crap on my computer and took me months of working with Microsoft's inept team of experts to even use my computer in a limited fashion but no internet.

I've loaded every munching program I could to clean it up on my own and now run Spybot Search & Destroy daily. Every time I run it, the problem it identifies is called "DSO Exploit".

Whether I use the Internet or not, each time that one comes up. Yesterday, I ran Spybot in Safe Mode and I also got "Windows Ad Tools" and one called "CallingHome.biz".

When Spybot is running and it flashes all the files it's checking, I see a lot of X-rated and porn sights (believe me, I don't go there) but none of them come up in the problem list. Are they old files that have previously been quarantined????

I do use Mozilla Firefox as my browser and have Norton Anti-Virus running as well as Spybot.

Anyone know what the DSO Exploit is?

Paw, John R., Socks?????

Thanks guys.

J.

[Abigail]

J,

I just went through a similar hell with our puter and have been trying to help my neighbor clean up hers as well (her daughter was the one who trashed both). :(-->

I'm not sure what the DSO Exploit is and would be very interested in getting an answer. It shows up not only on my puter here at home, but on the one at work as well. Whatever it is, it doesn't really seem to cause any problems.

Callinghome.biz on the otherhand is a problem and you will want to get rid of it. I think (though I am not sure) that all those X-rated "files" you are seeing rush past you in spybot are not files that are actually on your computer (necessarily) but files that spybot is looking for. Mine does the same thing.

Some of these nasty problems come from downloading junk off the internet. Others can come hidden in cookies you get simply by going to a website. We are now using a Norton's firewall and I am very picky about which cookies I will allow on my computer. If it is not from a website I trust and/or it's name is different than the website I am trying to access, I block it. Sometimes this means I cannot access a website I wanted to, but to me, that is better than having to clean this machine up again.

[CM]

Do a search for DSO exploit in your search engine and you will find the answer. I did but I forget what the answer was. I do know that it will not go away. And from what I remember it is not a problem. DSO Exploit still comes up on mine in spybotsd.

Or if memory serves there was a way to get rid of it but it was too much trouble to do. But I do remember that it's not a big problem for your comp.

Microsoft has a beta adware scanner if you want to try it. Just go to their web site and search for beta products. I'm at work now so I don't have the exact address of it. It's on my comp at home.

[CM]

Ok I'm home now-get off early on fridays.

Microsoft Anti Spyware

http://www.microsoft.com/athome/security/s...re/default.mspx

DSO Exploit

http://www.pchell.com/support/dsoexploit.shtml

http://www.auditmypc.com/DSO-exploit.asp

[CM]

jardinero

btw

What are the problems that you are having with your computer?

And study up on that microsoft tool. I loaded it. And it asks you for permission for everything!! And I mean everything that wants to do something on your comp. I uninstalled but still have the download.

[WordWolf]

*cracks knuckles*

Ok, this one I can answer.

AdAware and Spybot:S & D are 2 programs you absolutely should have on any

Windows-based pc.

With Spybot, the first thing you do, you activate the "immunization" function

(the little corner of bricks.) Remember to update weekly.

Now, AdAware and Spybot work differently.

AdAware scans everything in your system, looking for adware and the like,

and grabs whatever it doesn't trust. That means when you see names flashing,

that's the name of the file it's currently looking at.

(That is, it's on your pc, but not necessarily a problem.)

Spybot has a list of suspicious programs that hang out at conspicuous spots in

your pc. It looks for each program on its list. That means when you see names

flashing, that's the name of the file it's currently looking for.

(That is, it's a problem, but not necessarily on your pc.)

Make sure you've a decent, updated Firewall (not a Windows or Microsoft

product) and a decent, updated antivirus, and you should be fine. Remember to

run the antivirus often as well.

Oh-

and remember to delete old System Restores after a while,

especially if you've cleaned out garbage from your system since then.

Otherwise, you have "backups" of your viruses.

[Galen]

http://www.nsclean.com/dsostop.html

:-)

[igotout]

From what I understand, the DSO thing is nothing to worry about as someone else stated.

But it sounds like you have deedper problems, with Spyware returning and such.

Fisrt, what is your Operating System. (Plese don't say Windows 98)

Also if it is XP have you upgraded to Service Pack 2? Please do.

Are you on broadband or dial up?

With proper precautions it is possible to have NO spyware, to even eliminate the threat of it for the most part. It takes some work but actually it is rather simple. ALL of the solutions regarding Spyware have already been posted here. They are also posted all over the Internet. You must use a combination of solutions. My favorite being preemtive programs that place thousands of known spyware sites into your Restricted Sites of your browser.

But one thing that is little talked about and most overlooked, is that when combatting spyware, unplug yourself from the Internet until you are clean. Same with Viruses.

As I have said, Spyware is worst than viruses in my opinion, for the average user (not businesses). It is ruining the efficiency computers all over America, rendering many obsolete until they get rid of it. I have seen computers with hundreds of individual pieces of spyware on it. Spam is nothing compared to the damage Spyware does. They need Spyware legislation in addition to Spam legislation.

Ask any computer technician ANYWHERE. What is the most common problem they are needed for these days...... I think we all know the answer.

But on the positive side, it is possible to make it all go away and never bother you again. And if you do get some, which would be rare with proper precaution, it is easily detected and eliminated.

[jardinero]

Thank you all for responding and I apologize I am slow in getting back to this - - just had a very busy weekend.

Abigail: It was reading about your problems that got me to post for more info. I think there's some good info below.

CM: Thanks very much for the links. I will read up on the Microsoft tools.

The problems I was having (prior to installing Spybot) was caused by a virus (which Microsoft after months of phone calls finally helped get it removed).

Then I had a hijacker problem which kept us from being able to use the Internet (which is why I was absent from GSC for a few months).

I still have something I'm sure, because right after I use the Internet now (just for email and GSC - - nothing else), I run Search & Destroy and it'll find other stuff (don't have my list with me now). When I run it a second time, it just finds the DSO Exploit.

Wordwolf: Thanks for the info. Very good info for me. How do you delete the old System Restores?????

Galen: thanks for the link. Looks like a good one. I'll check it out tonight when I get home.

John: I'm running on XP Professional and had not added the Service Pack 2 because a couple of IT guys at work were hesitant about it. But you're saying I should.

I am using dial up right now (I switched from Broadband after months of non use with the problems, but am ordering DSL this week.

I do use the latest version of Norton's, I have Spybot Search & Destroy which I run before and after we use the computer each time and I use Mozilla Firefox as my browser. Any other suggestions?

THANK YOU ALL VERY MUCH FOR SUCH HELPFUL INFO. I could not bear to talk to another person at Microsoft (particularly the screeners in India and the Phillipines).

J.

[jardinero]

One more thing. About a firewall. Which do you suggest and how do I install it?

Thank you again. You all are wonderful!

J.

[Steve!]

If DSO Exploit was not something to want off of your computer, Spybot wouldn't look for it.

You have to start up in Safe Mode, and start up Spybot.

Then when it comes back with DSO Exploit, it will give a registry entry. Click (or double-click, I forget which) on the registry icon, and get into the registry editor. The entry it takes you to has a DWORD that says "1004". Delete just that entry, and then create a new string, and put in the value 1001, and I think that should do it.

[Galen]

I have found great 'wisdom' at:

http://Theeldergeek.com/

I was a major geek with DOS, but WinXP has just so much to it, that I needed to find a good resource. His 'Geekiness' does seem to have a good handle running WinXP.

Also his forums are good.

:-)

[jardinero]

Thanks Steve. I'll try that.

I did run Spybot in Safe Mode over the weekend, however there's got to be something else going on, cuz as soon as I get on the Internet (even to somewhere safe like GSC), Spybot find some other items other than DSO Exploit. So for the time being, I'm running it before and after each computer session.

Norton quarantined a Trojan virus on Saturday, so I'm going to try all the above good advice (and links) and will report back if I'm still having probs.

Thanks for chiming in :)-->

J.

[WordWolf]

quote:

---

Originally posted by jardinero:

One more thing. About a firewall. Which do you suggest and how do I install it?

Thank you again. You all are wonderful!

J.

---

Until you have a firewall running, consider your computer to be, in effect,

completely unprotected.

I use ZoneAlarm.

People who know more about computers than me have recommended Kerio.

I like ZoneAlarm because it's kind to newbies.

Here's a link for Kerio.

http://www.kerio.com/us/kpf_home.html

Select "download" and follow whatever instructions you get.

Here's a link for ZoneAlarm.

http://www.zonelabs.com/store/content/home2.jsp

Select "Free ZoneAlarm and trials",

then "Zone Alarm Free Download"

Both programs offer a free version which is all you need for home use.

(If you have DSL, eventually you'll want to add a router. Ask someone with

a router to explain why.)

I expect both will be self-explanatory in terms of installing.

(ZoneAlarm certainly is.)

====

I recommend you download Windows Service Pack 2,

right after you do everything you can to clean up the hard drive as it

currently exists.

(People with security holes and viruses are the ones who have most problems

with SP2.)

[TheManOfa Thousand ScreenNames]

From Abi

If you are using Nortons or WANT to use Nortons DO NOT USE ZONE ALARM! Zone Alarm changes your regsitry keys in such a way that you cannot run Nortons - I just went through all kinds of hell over this.

It is my experience with Zone Alarm that taught me to do my research FIRST, find a good program and stick with it.

Personally, we are using Nortons Internet Security 2005. It has the anti-virus, firewall, parental controls - almost everything. It was hell getting it installed and up and running but I am very very happy with it now.

Another thing J - Even IF you get rid of all the spyware, if you continue going to the websites where you got it in the first place, your just going to keep getting it over and over again. Also Spybot is not always successful at finding everything or cleaning everything.

I have Spybot, Ad Aware and the Yahoo Toolbar with the spyware program. Since running them, with Norton's we have not had a single serious problem - just a few tracking cookies from time to time which have been easily removed.

[WordWolf]

Good to know.

Norton and ZoneAlarm do not mix.

Since WordWolf and Norton do not mix, I keep forgetting this.

As it stands, I get better reports from users of several FREE

antivirus programs than I do for Norton, which people pay for.

In fact, one friend got frustrated with Norton and switched

to AVG (which is free.)

AVG

AntiVir

and Avast!

all have free versions,

and I regularly hear more stories of customer satisfaction

from the users of each.

[WordWolf]

quote:

---

Originally posted by jardinero:

(snip)

WordWolf: Thanks for the info. Very good info for me. How do you delete the old System Restores?????

(snip)

THANK YOU ALL VERY MUCH FOR SUCH HELPFUL INFO. I could not bear to talk to another person at Microsoft (particularly the screeners in India and the Phillipines).

J.

---

Deleting old System Restore Points.

This should be done every once in a while.

If it's been a long time, you'll discover a lot more free space

on your pc all of a sudden.

Here's how it's done on XP.

start> programs> accessories> system tools> Disk Cleanup.

Select "more options" and where it says "System Restore",

select "clean up".

That will delete all restore points except the most recent.

Keep in mind that your pc periodically will make its own restore

points even if you NEVER do.

I recommend making one for yourself just before doing something

radical, just in case you need to undo it.

Once you've completely cleaned out your pc,

I'd recommend making your own Restore Point,

and then cleaning up the old ones again.

=====

Furthermore,

disk cleanups should be done every few days if not daily

(or every few hours).

For that matter, you should also clear your Firefox cache.

Tools>Options>Privacy

Clear "History" "Cookies" "Cache".

BTW,

when you have time,

go to

http://www.illwillpress.com/vault.html

and select "Tech-Support".

I think you'll recognize this situation. :)-->

[jardinero]

Thanks, Abi. Good info on what's not compatible.

Wordwolf: I installed SP2 last night as Igotout suggested. Will I have to uninstall and re-install it once I download a firewall?

Thanks for the other helpful info. I'll check out the link later :)-->.

I do clean out the cookies, cache and history periodically (been doing it monthly), but will do it more often now.

The problem started when my son had a party and one of the jr. high boys got on my computer and on a porn site(unbeknownst to me or my son, but we caught him on the site). My son knows to follow all the security measures we have in place about staying off the Internet from home except for school work sites and checking floppies for viruses, etc.

Anyway, it's been a long haul getting it cleaned up and I thank you once again for all your kind assistance :)-->.

J.

[igotout]

SP2 has a built in firewall. But I prefer to use a router and not use the software firewall built into XP.

With SP2 you will have all the patches and fixes for all the security flaws that were open on XP since it came out.

That might help.

You shouldn't have to run Spyware catching software all the time. If you take preventative steps after getting rid of it.

[danteh1]

Wordwolf happened to mention AntiVir free anti virus. I amcurrently running it on my computer and it works great.

It has found several worms, trojans and viruses that would have made it into my system if not for it.

I downloaded it from freeantivirus.com , just go down the list and you will see the 'AntiVir' name, click on it and then the download area and then the little umbrella logo on the site.

Updating it is a brease and will install any new updates to the program and the anti-virus list for the program. It takes a whileto download any major updates, but seems to catch things that Norton Anti-Virus 2002 that i also have on my computer doesn't seem to catch.

[WordWolf]

quote:

---

Originally posted by jardinero:

(snip)

Wordwolf: I installed SP2 last night as Igotout suggested. Will I have to uninstall and re-install it once I download a firewall?

(snip)

J.

---

No.

My warning was to try to forestall problems. Some people report having

problems with SP2. Most of them are people whose system registry and other

stuff has been chopped to swiss cheese by spyware, viruses, etc.

If it's working fine for you, leave it alone.

In fact, if you were setting up a Windows pc for the first time,

I'd recommend installing SP2 before going online, and immediately

downloading a firewall and antivirus as soon as you WERE online.

[WordWolf]

quote:

---

Originally posted by igotout:

SP2 has a built in firewall. But I prefer to use a router and not use the software firewall built into XP.

With SP2 you will have all the patches and fixes for all the security flaws that were open on XP since it came out.

That might help.

You shouldn't have to run Spyware catching software all the time. If you take preventative steps after getting rid of it.

---

SP2's firewall is an improved version of the Windows Firewall.

The original one was a toy, and I always said to turn it on before going online

and getting a REAL firewall.

The newer one is better than that, but it is STILL a Microsoft product,

and "Microsoft security" is an oxymoron.

Switch the thing on to minimize problems while you download a REAL firewall

from Kerio or somewhere.

I LIKE to run my Spyware catchers daily! It excites me to see them come up

blank! Plus, AdAware keeps finding routine things I can ignore but prefer

not to.

[krys]

Wordwolf:

I had one of those guys from India on a tech support call, and he told me that in order to fix the problem all I had to do was re-format my hard drive and I'd be fine! He would hold on while I did it too.......

[Galen]

From what I have read nothing but nothing beats the firewalls provided by a router.

Then no matter what your computer is doing, an entirely seperate box is handling those hackers.

[socks]

I just posted on Krys's thread my recommendation for how to handle hackers, Galen. I'm sure it would fly given a little nudge by the consumer community.

Once convicted of their heinous crimes they will be given a chance to rehabilitate themselves. They'll be taken out to sea, 20 miles out, and tossed overboard with all of their program disks duct taped together to use as a flotation device. All they have to do is swim back to land and they'll be free to go their way. I think it would be a simple but effective way to address the problem.