Trojan delivers unwanted gift to Windows PCs

Trojan delivers unwanted gift to Windows PCs

Last modified: December 28, 2005, 4:04 PM PST
By Elinor Mills
Staff Writer, CNET News.com

A new Trojan horse program was infecting PCs on Wednesday, exploiting a hole in Windows systems to sneak onto computers, then dropping adware or spyware or turning them into zombies, according to several Internet security companies.
The Trojan, dubbed Exploit-WMF (Windows Meta File), was rated a category 2 level risk, meaning it had the potential to continue to spread, said Dave Cole, director of security response at Symantec.

http://msn-cnet.com.com/Trojan+delivers+unwanted+gift+to+Windows+PCs/2100-7349_3-6011406.html?part=msn-cnet&subj=ns_2510&tag=mymsn

 

Arie--Does the suggested fix mean that you should disable and then immediately reenable Windows Picture and Fax Viewer? Or is the re-enabling step shown only for the time you may want it back?
I came across this
http://www.microsoft.com/technet/security/prodtech/windowsxp/depcnfxp.mspx
Not sure if/how it applies. I have all settings as recommended, though the MS reference does not seem to know how to enter the Advanced tab. It, of course, is from Control Panel|System.

 

Thought it might be helpful to link this thread to charlesvar's latest information
http://www.windowsbbs.com/showthread.php?p=271182#post271182

 

The problem with unregistering Windows Picture and Fax viewer is that Explorer will no longer show thumbnails. Users of the Maxthon IE add-on can add *.wmf to their content filter folder to block this exploit.

Roger

 

WMF Exploit: Temporary Patch Available!

http://windowsbbs.com/showthread.php?p=271554