Every time I run spybot I get 5 entries of DSO Exploit and it says it removed them. When I expand on the items it shows they are sitting in my user files in the reg. What I need to know is what keeps putting them back and what do they do? thanks

DOS = Data source object exploit. I would delete them all. Then go to Windows Update and run an update check. It sounds like you need to download a few security updates.

it is more than likely caused by windows media player and its setup to locate and inform on what your music preferences are. "Data Source Object" exploit was an original spyware that was so termed by spybot and was associated with coolweb search and some other spyware. with the new media player fix that M$ installed lately dealing with media player 9 spybot is using its protocol to name it a DSO exploit because it uses the same info to record the music info that you ask it too. It is also popssible that it is an actual exploit and can be removed by spybot in the advanced mode and pathed to registry keys to be destroyed. Self-reverence Self-knowledge Self-control These three alone LEAD to SUCCESS -Alfred Lord Tennyson

Hi setishock, ▫ [XP 104837] Spybot keeps finding DSO exploit Spybot seems to have trouble when a registry-value isn't of the valuetype it thinks it should be. Also check the permissions on those particular regkeys. Spybot may not have the right permissions to make its changes. ___________________________________________ ☺ [Belgium, GMT+1]_________________________svg

DSO Exploit cannot be removed with Spybot 1.3. You will need to remove two registry keys manually (Run-->regedit.exe): HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004 and: HKEY_USERS\S-1-5-21-394927024-3472591751-2543970293-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004 Just select "1004" and press delete. You may want to export the registry to a backup first.

I can confirm that removing the registry entries above will stop Spybot from detecting DSO exploit. It's actually a fault with Spybot (false positive) and not actually an exploit on your system.