Another workaround for WMF exploit



There are at least two other workarounds for the Windows Meta File (WMF) exploit that I’ve been looking into this afternoon. These from sunbelt blog.

First up…

2. Change file associations for WMF files.
An equally ugly fix (but perhaps preferable) is to do the following:
1. Go to My documents, Tools, Folder Options, File Types.
2. Change WMF Image to notepad and select always open with this.
Your WMF files will open in Notepad. Ugly, but it is a fix.


The other solution is….

3. Run IESPYAD.
IESpyad is a free tool that puts block lists into IE’s restricted sites zone. It’s managed by Eric Howes, who works as a consultant for Sunbelt. We regularly update him with the latest URLs. Click here.
(Note that Eric is currently out of town so I’m not sure it’s being updated as frequently.)

Of course, the first solution/workaround was to unregister the dll that reads WMF files… (among other images)… REGSVR32 /U SHIMGVW.DLL from the command line (or start…run…)

Related Posts

Blog Traffic Exchange Related Posts
  • Nyxem.E virus delete files payload F-secure has some details on a dangerous payload for the Nyxem.E virus. (The Nyxem.E virus is very similar to the Email-Worm.Win32.VB.bi that was talked about earlier in the week.) In fact, this virus seems to be spreading fairly well (not the blockbuster spread of older email viruses, but it is......
  • WMF 0-day update Last night while I was in the midst of infecting a virtual machine, Microsoft issued a release that there's a "possible vulnerability"... fortunately, their technical document is a bit more straightforward... technet advisory here. Spyware Confidential also has a good roundup on the coverage so far. There's a bit more......
  • Ron Ads NetupBanner Popups and Invalid Image file c:\windows\system32\nolomipu.dll Here are some notes from a recent spyware cleanup. The system came in and there were complaints that "Ron Ads by NetupBanner" kept coming up all the time as well as popups claiming that the dll c:\windows\system32\nolomipu.dll is not a valid windows image - mismn.exe bad image. I ran malwarebytes......
Blog Traffic Exchange Related Websites
  • File Sharing For You To Benefit From File sharing is the activity which is common for many people from all over the world. Those who deal with the World Wide Web for any reason will face the necessity to learn something about file sharing sooner or later. Correspondingly, it would be wise to spend some time looking......
  • P.E.P For Week of June 7-June 11, 2010 **Don't forget to check out our current Contests/Polls for your chance to win prizes!**   Smart Retirement Planning When The Market is Terrible- keep your retirement in site with these tips. (@wealthpilgrim)   Simple, Balanced Approach to Your Diet- don't follow the rules and you will do well. (@dumblittleman)   How To Stockpile......
  • Lots of Tool Tips Another Nutty Trick Let us say that you need to remove a nut with the use of an open end wrench but the wrench is too large for the nut. When you can do is insert a coin or a washer in between the nut and the wrench. The coin......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site