| View previous topic :: View next topic |
| Author |
Message |
tonycarr Black Belt 2nd Degree


Joined: 28 Dec 2001 Posts: 2218 Location: SouthEastern , USA
|
Posted: Wed Dec 28, 2005 12:41 pm Post subject: Windows Meta Files, or those ending in .wmf...Watch out ... |
|
|
Be aware , some sort of FAKE anti virus screen claiming to clean your rig can infect you , even on AV protected winXP sp2 machines . Link to story below ...
http://blogs.washingtonpost.com/securityfix/2005/12/exploit_release.html _________________ E Pluribus Unum |
|
| Back to top |
|
 |
evasive Mobo-fu Master


Joined: 06 May 2001 Posts: 36479 Location: Netherlands, Breda
|
Posted: Wed Dec 28, 2005 3:15 pm Post subject: |
|
|
made this into a sticky... _________________ We hate rut, but we fear change.
System error, strike any user to continue...
Last edited by evasive on Wed Dec 28, 2005 10:55 pm; edited 1 time in total |
|
| Back to top |
|
 |
DAVE1 Mobo-fu Master


Joined: 14 May 2005 Posts: 7699
|
Posted: Wed Dec 28, 2005 3:50 pm Post subject: |
|
|
I wonder what it acutally looks like
are there any pictures of it yet ? _________________ Join team 33258 today!! |
|
| Back to top |
|
 |
tonycarr Black Belt 2nd Degree


Joined: 28 Dec 2001 Posts: 2218 Location: SouthEastern , USA
|
|
| Back to top |
|
 |
DAVE1 Mobo-fu Master


Joined: 14 May 2005 Posts: 7699
|
Posted: Thu Dec 29, 2005 7:13 am Post subject: |
|
|
i doubt I would believe one of those but now I can tell other people about it _________________ Join team 33258 today!! |
|
| Back to top |
|
 |
kltsin Black Belt 2nd Degree


Joined: 29 Jun 2004 Posts: 2792 Location: St. Augustine, Fl
|
Posted: Tue Jan 03, 2006 1:32 pm Post subject: |
|
|
This exploit is currently billed as the worst infection in history. It can hide rootkits, it can even hide itself.
Heres a temporary fix for this exploit until MS gets one
Info and download link can be found here
After installing a restart is in order.
Here is a checker to see if your still vulnerable
http://castlecops.com/a6438-Hot_off_the_press_WMF_Vulnerability_Checker.html |
|
| Back to top |
|
 |
evasive Mobo-fu Master


Joined: 06 May 2001 Posts: 36479 Location: Netherlands, Breda
|
|
| Back to top |
|
 |
tonycarr Black Belt 2nd Degree


Joined: 28 Dec 2001 Posts: 2218 Location: SouthEastern , USA
|
Posted: Fri Jan 06, 2006 6:39 am Post subject: ...it's not even Tuesday yet ... |
|
|
I wonder if ms made a patch for win98 ,me & 2000 ? on this one as well ? as xp ? From what I read of it , it affected the other ms os's too. _________________ E Pluribus Unum |
|
| Back to top |
|
 |
mitsubishi Green Belt

Joined: 13 Sep 2004 Posts: 171 Location: UK
|
Posted: Fri Jan 06, 2006 6:51 am Post subject: Re: ...it's not even Tuesday yet ... |
|
|
| tonycarr wrote: | | I wonder if ms made a patch for win98 ,me & 2000 ? on this one as well ? as xp ? From what I read of it , it affected the other ms os's too. |
No: http://news.com.com/2061-10789_3-6020645.html
Well not for 98 and me anyway. There's no proof they are vunerable anyway, the exploits known don't appear to work. |
|
| Back to top |
|
 |
EmilyB Guest
|
Posted: Fri Jan 06, 2006 7:00 am Post subject: Re: ...it's not even Tuesday yet ... |
|
|
| tonycarr wrote: | | I wonder if ms made a patch for win98 ,me & 2000 ? on this one as well ? as xp ? From what I read of it , it affected the other ms os's too. |
http://www.microsoft.com/technet/security/bulletin/MS06-001.mspx
| Quote: | | Are Windows 98, Windows 98 Second Edition, or Windows Millennium Edition critically affected by one or more of the vulnerabilities that are addressed in this security bulletin?No. Although Windows 98, Windows 98 Second Edition, and Windows Millennium Edition do contain the affected component, the vulnerability is not critical because an exploitable attack vector has not been identified that would yield a Critical severity rating for these versions. For more information about severity ratings, visit the following Web site. |
|
|
| Back to top |
|
 |
|