DSO Exploit : Bla Trojan : SearchSquire

Why can't I seem to remove these and keep them out? They
all keep returning .... DSO Exploit - an
HKEY,User,Microsoft,Internet Explorer ... what is this ..
it comes back? I can't find SearchSquire or anything
helping it to get rid of it ... some form of Internet
Explorer sidebar search ... don't have a clue! The Bla
Trojan is attacking every 1/2 hour to hour.
I think this mostly started with WebRebates but I don't
know where that came from either.
I run scans constantly .. especially the past whole week I
have been under attack.
I have installed:
Win98se
Norton
System Mechanic
Ad-Aware
Spybot S&D
CWShredder

I DONOT want to reformat again!

Marra

Backdoor.Bla.Trojan
http://surl.co.uk/?885

Original URL:
http://securityresponse.symantec.com...kdoor.bla.troj
an.html

--

Regards

Steven Burn
Ur I.T. Mate Group
www.it-mate.co.uk

Keeping it FREE!


"Marra" wrote in message
...
Why can't I seem to remove these and keep them out? They
all keep returning .... DSO Exploit - an
HKEY,User,Microsoft,Internet Explorer ... what is this ..
it comes back? I can't find SearchSquire or anything
helping it to get rid of it ... some form of Internet
Explorer sidebar search ... don't have a clue! The Bla
Trojan is attacking every 1/2 hour to hour.
I think this mostly started with WebRebates but I don't
know where that came from either.
I run scans constantly .. especially the past whole week I
have been under attack.
I have installed:
Win98se
Norton
System Mechanic
Ad-Aware
Spybot S&D
CWShredder

I DONOT want to reformat again!

Marra

If you keep getting DSO Exploit with Spybot it probably isn't anything to
worry about. Whenever I run spybot the same happens. If it's getting a bit
annoying it you can go into spybot in advanced mode and disable searching
for DSO Exploit, but this problem seems very common. Also, make sure you are
running Spybot 13 not 12 and you have the latest updates. I have spoken to
many others in these newsgroups with the same recurring problem but it
should be OK.

--
Thanks,
Andrew Bonney (abweb)

www.andrewbonney.com

Tel: 01943 872966
Fax: 08701 309329

abweb is a registered Microsoft partner


This e-mail was scanned with Norton AntiVirus 2004 software for viruses and
worms prior to the message being sent. If you received this e-mail in error,
please reply to abweb to explain the problem. Please do not read the e-mail
as it may contain personal information.



"Marra" wrote in message
...
Why can't I seem to remove these and keep them out? They
all keep returning .... DSO Exploit - an
HKEY,User,Microsoft,Internet Explorer ... what is this ..
it comes back? I can't find SearchSquire or anything
helping it to get rid of it ... some form of Internet
Explorer sidebar search ... don't have a clue! The Bla
Trojan is attacking every 1/2 hour to hour.
I think this mostly started with WebRebates but I don't
know where that came from either.
I run scans constantly .. especially the past whole week I
have been under attack.
I have installed:
Win98se
Norton
System Mechanic
Ad-Aware
Spybot S&D
CWShredder

I DONOT want to reformat again!

Marra

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

Chances are the DSO Exploit is a False Positive declaration by Spybot. For the rest...

1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download sysclean.com and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt186.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDoc...SysRestore.htm
3) Reboot your PC into Safe Mode
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point
9) Please report back your results

Dave




"Marra" wrote in message
...
| Why can't I seem to remove these and keep them out? They
| all keep returning .... DSO Exploit - an
| HKEY,User,Microsoft,Internet Explorer ... what is this ..
| it comes back? I can't find SearchSquire or anything
| helping it to get rid of it ... some form of Internet
| Explorer sidebar search ... don't have a clue! The Bla
| Trojan is attacking every 1/2 hour to hour.
| I think this mostly started with WebRebates but I don't
| know where that came from either.
| I run scans constantly .. especially the past whole week I
| have been under attack.
| I have installed:
| Win98se
| Norton
| System Mechanic
| Ad-Aware
| Spybot S&D
| CWShredder
|
| I DONOT want to reformat again!
|
| Marra

http://securityresponse.symantec.com...la.trojan.html

http://securityresponse.symantec.com...rchsquire.html

--
Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm

"Marra" wrote in message
...
Why can't I seem to remove these and keep them out? They
all keep returning .... DSO Exploit - an
HKEY,User,Microsoft,Internet Explorer ... what is this ..
it comes back? I can't find SearchSquire or anything
helping it to get rid of it ... some form of Internet
Explorer sidebar search ... don't have a clue! The Bla
Trojan is attacking every 1/2 hour to hour.
I think this mostly started with WebRebates but I don't
know where that came from either.
I run scans constantly .. especially the past whole week I
have been under attack.
I have installed:
Win98se
Norton
System Mechanic
Ad-Aware
Spybot S&D
CWShredder

I DONOT want to reformat again!

Marra

Hit send to quick.
Also:
To make sure your system is clean of spyware/adware/hijacker parasites get the help
from those that specialize in it.

Download/run HijackThis from:
http://www.richardthelionhearted.com...downloads.html

http://majorgeeks.com/downloads31.html

Do not remove anything with it until you get advice on what to remove, HJThis will
list many apps that are needed along with the bad ones. Removing items listed
hap-hazardly without knowing what they are can/will create a royal mess. Read the
quick start here on how to create a log file that can be copied/pasted into a forum
that can provide assistance on removal of unwanted pests.
http://mjc1.com/mirror/hjt/#quick

Then post the logs to an appropriate NG here where they specialize in
spyware/hijacker removal. Please read any sticky notes for proper posting which are
most commonly posted first at the top in each specific forum. Read any information
under each forum category name for information on what that particular one is used
for, look for the proper one that you post logs to.
http://forums.spywareinfo.com/



http://forum.aumha.org/

--
Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm

"Marra" wrote in message
...
Why can't I seem to remove these and keep them out? They
all keep returning .... DSO Exploit - an
HKEY,User,Microsoft,Internet Explorer ... what is this ..
it comes back? I can't find SearchSquire or anything
helping it to get rid of it ... some form of Internet
Explorer sidebar search ... don't have a clue! The Bla
Trojan is attacking every 1/2 hour to hour.
I think this mostly started with WebRebates but I don't
know where that came from either.
I run scans constantly .. especially the past whole week I
have been under attack.
I have installed:
Win98se
Norton
System Mechanic
Ad-Aware
Spybot S&D
CWShredder

I DONOT want to reformat again!

Marra