Maker tech hub — AI · 3D print · Pi · ESP32 · plus the classic tech archive.

Free ESP32 kit · Books · Network Ninja · Archive

Avery J. Parker Practical maker tech — AI tools, 3D printing, Raspberry Pi & ESP32
Classic tech archive. From the original averyjparker.com tech blog — historical context; pair with modern guides where noted. Full archive · Maker projects · Network Ninja

Classic tip · Classic

Update on the WMF exploit - more sites to block

· · Computers , Security , Spyware , Tech Support , Viruses , Windows

I haven't checked to see if these are already on other block lists for the WMF exploit, but the following addresses are advised to be blocked (from f-secure).... toolbarbizbiz toolbarsitebiz toolbart…

Written by

Avery J. Parker

IT veteran, maker educator, and author of Network Ninja, 3D Printing Mastery, and AI Workflow Mastery. Business IT: Diversified Tech Solutions.

I haven't checked to see if these are already on other block lists for the WMF exploit, but the following addresses are advised to be blocked (from f-secure)....
toolbarbizbiz
toolbarsitebiz
toolbartraffbiz
toolbarurlbiz
buytoolbarbiz
buytraffbiz
iframebizbiz
iframecashbiz
iframesitebiz
iframetraffbiz
iframeurlbiz
The "unregister workaround" is the best at this point because it will prevent ANY file extension image being used to trigger the exploit. It is possible for other image types to be used.
1. Click Start, click Run, type "regsvr32 -u %windir%\system32\shimgvw.dll" (without the quotation marks), and then click OK.
2. A dialog box appears to confirm that the un-registration process has succeeded. Click OK to close the dialog box.
Impact of Workaround: The Windows Picture and Fax Viewer will no longer be started when users click on a link to an image type that is associated with the Windows Picture and Fax Viewer.
From... f-secure reporting on MS security advisory.

Related