Another workaround for WMF exploit



There are at least two other workarounds for the Windows Meta File (WMF) exploit that I’ve been looking into this afternoon. These from sunbelt blog.

First up…

2. Change file associations for WMF files.
An equally ugly fix (but perhaps preferable) is to do the following:
1. Go to My documents, Tools, Folder Options, File Types.
2. Change WMF Image to notepad and select always open with this.
Your WMF files will open in Notepad. Ugly, but it is a fix.


The other solution is….

3. Run IESPYAD.
IESpyad is a free tool that puts block lists into IE’s restricted sites zone. It’s managed by Eric Howes, who works as a consultant for Sunbelt. We regularly update him with the latest URLs. Click here.
(Note that Eric is currently out of town so I’m not sure it’s being updated as frequently.)

Of course, the first solution/workaround was to unregister the dll that reads WMF files… (among other images)… REGSVR32 /U SHIMGVW.DLL from the command line (or start…run…)

Related Posts

Blog Traffic Exchange Related Posts
  • New IM worm using WMF vulnerability There is news this morning of a new twist in the WMF vulnerability (it was only a matter of time.) There are reports of an instant messenger worm using the vulnerability to spread. Currently incidents.org is reporting that the worm is spreading through the MSN messenger IM network and contains......
  • How to Remove ShieldSafeness | ShieldSafeness Removal Guide The Wini family of rogue antivirus software has given us yet another version in the last couple days... ShieldSafeness. This is quick on the heels of SoftStronghold (softstronghold removal guide) and succeeds the following variants in this prolific family.... Softveteran (see the softveteran removal guide) but.... SoftCop (see the SoftCop......
  • Nyxem.E virus delete files payload F-secure has some details on a dangerous payload for the Nyxem.E virus. (The Nyxem.E virus is very similar to the Email-Worm.Win32.VB.bi that was talked about earlier in the week.) In fact, this virus seems to be spreading fairly well (not the blockbuster spread of older email viruses, but it is......
Blog Traffic Exchange Related Websites
  • P.E.P For Week of June 7-June 11, 2010 **Don't forget to check out our current Contests/Polls for your chance to win prizes!**   Smart Retirement Planning When The Market is Terrible- keep your retirement in site with these tips. (@wealthpilgrim)   Simple, Balanced Approach to Your Diet- don't follow the rules and you will do well. (@dumblittleman)   How To Stockpile......
  • External Hard Drive Recovery Strategies   There are many ways that can be done right before a external hard drive recovery has to be performed. Recovery software installation on the internal drive is necessary to retrieve lost data from an external hard drive . It is significant to guarantee that the used software will operate......
  • Download any .dll file that is Missing in Your Computer Well Folks, some of you might be facing problems related to .dll files. You can download missing .dll files from sites given below: DLL-files.com - Download all your missing dll-files. DllDump - free dll files. download dll files you need immediately! InfDump.com - download inf files you need immediately! OcxDump.com......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site