Windows Meta Files, or those ending in .wmf...Watch out ...

[tonycarr]

Be aware , some sort of FAKE anti virus screen claiming to clean your rig can infect you , even on AV protected winXP sp2 machines . Link to story below ...


http://blogs.washingtonpost.com/securit ... lease.html

[evasive]

made this into a sticky...

[DAVE1]

I wonder what it acutally looks like

are there any pictures of it yet ?

[tonycarr]

I wonder what it acutally looks like

are there any pictures of it yet ?

Link below to a typical look but the article reads it can change ...

http://www.websensesecuritylabs.com/ale ... lertID=385

[DAVE1]

i doubt I would believe one of those but now I can tell other people about it

[kltsin]

This exploit is currently billed as the worst infection in history. It can hide rootkits, it can even hide itself.

Heres a temporary fix for this exploit until MS gets one

Info and download link can be found here
After installing a restart is in order.

Here is a checker to see if your still vulnerable
http://castlecops.com/a6438-Hot_off_the ... ecker.html

[evasive]

Official patch is released before the monthly batch:
http://www.microsoft.com/downloads/deta ... layLang=en

[tonycarr]

I wonder if ms made a patch for win98 ,me & 2000 ? on this one as well ? as xp ? From what I read of it , it affected the other ms os's too.

[mitsubishi]

I wonder if ms made a patch for win98 ,me & 2000 ? on this one as well ? as xp ? From what I read of it , it affected the other ms os's too.

No: http://news.com.com/2061-10789_3-6020645.html
Well not for 98 and me anyway. There's no proof they are vunerable anyway, the exploits known don't appear to work.

[EmilyB]

I wonder if ms made a patch for win98 ,me & 2000 ? on this one as well ? as xp ? From what I read of it , it affected the other ms os's too.

http://www.microsoft.com/technet/securi ... 6-001.mspx

Are Windows 98, Windows 98 Second Edition, or Windows Millennium Edition critically affected by one or more of the vulnerabilities that are addressed in this security bulletin?No. Although Windows 98, Windows 98 Second Edition, and Windows Millennium Edition do contain the affected component, the vulnerability is not critical because an exploitable attack vector has not been identified that would yield a Critical severity rating for these versions. For more information about severity ratings, visit the following Web site.