I think spybot removed something that's supposed to be there.

Discussion in 'Windows Desktop Systems' started by veronica, Jan 25, 2004.

  1. veronica

    veronica Guest

    I ran it. It said a bunch of things in the registry.

    This is 1 of them: "HKEY_USERS\Microsoft\Windows\CurrentVersion\internet setting" < Is this spyware or something that is supposed to be there??

  2. LeeJend

    LeeJend Moderator

    Fort Worth, TX
    Depends on what is says in the data.

    MS stores program setup information in the registry (that's what it's for) but spyware and malware can highjack the settings and point them to something else. Like making your start page "XXX-PORN_INC".

    A removal tool may take out the new setting, but then it doesn't know where it used to point to so it may set it to some default like "MSN" instead, or leave it blank.

    I don't have any listing like that in my registry under "HKEY_USERS\" they all start with "S" and a bunch of numbers.
  3. Electronic Punk

    Electronic Punk Administrator Staff Member Political User Folding Team

    Copenhagen, Denmark
    same here, looks like spyware ;p
  4. Enyo

    Enyo Moderator

    Could be a valid setting or a hijacked setting under that key.

    You should be able to restore the item.
  5. leedogg

    leedogg Gojyone kawaiiiiiiii!

    Yes in spybot there should be a history of what was removed under recovery, however in most likelyhood that was indeed spyware. If you can post the complete item, we can provide more info
  6. veronica

    veronica Guest

    It said in bold letters above:
    "DSO Exploit: Data Source object exploit".

    When I put the curser on it this showed up:
    " c:\Documents and Settings\All Users.Windows\Application Data\Spybot&Destroy\Recovery\DSOExploit.Zip

    Thanks for the replies.
  7. Enyo

    Enyo Moderator

    That's fine you dont need to do anything. SpyBot correctly removed an object.