I think spybot removed something that's supposed to be there.

[veronica]

I ran it. It said a bunch of things in the registry.

This is 1 of them: "HKEY_USERS\Microsoft\Windows\CurrentVersion\internet setting" < Is this spyware or something that is supposed to be there??

Thanks.

 

[LeeJend]

Depends on what is says in the data.

MS stores program setup information in the registry (that's what it's for) but spyware and malware can highjack the settings and point them to something else. Like making your start page "XXX-PORN_INC".

A removal tool may take out the new setting, but then it doesn't know where it used to point to so it may set it to some default like "MSN" instead, or leave it blank.

I don't have any listing like that in my registry under "HKEY_USERS\" they all start with "S" and a bunch of numbers.

 

[Electronic Punk]

same here, looks like spyware ;p

 

[Enyo]

Could be a valid setting or a hijacked setting under that key.

You should be able to restore the item.

 

[leedogg]

Yes in spybot there should be a history of what was removed under recovery, however in most likelyhood that was indeed spyware. If you can post the complete item, we can provide more info

 

[veronica]

Yes in spybot there should be a history of what was removed under recovery, however in most likelyhood that was indeed spyware. If you can post the complete item, we can provide more info

It said in bold letters above:
"DSO Exploit: Data Source object exploit".

When I put the curser on it this showed up:
" c:\Documents and Settings\All Users.Windows\Application Data\Spybot&Destroy\Recovery\DSOExploit.Zip

Thanks for the replies.

 

[Enyo]

That's fine you dont need to do anything. SpyBot correctly removed an object.