This ought to be a nasty one...

[BadFrog]

http://money.cnn.com/2006/01/03/technology/windows_virusthreat/index.htm?cnn=yes

"Once you can accept the universe as matter expanding into nothing that is something, wearing stripes with plaid comes easy"
Albert Einstein

 

[pechenegs]

I tried the unoffical patch but it seemed to screw up my mozila browser so I unregistered the dll in question until Microsoft get a new patch out!

See here below for more info!

http://news.zdnet.co.uk/0,39020330,39245447,00.htm

 

[greyted]

Some interesting comments regarding this problem, here:

http://www.dslreports.com/forum/security

Here:

http://www.grc.com/sn/notes-020.htm

And a thirty-two page thread here:

http://www.dslreports.com/forum/remark,15115819

As always, take great care if you do install the non-MS fix, A Microsoft fix (was mentioned in one thread) to be available by the 10th January?


Castlecops is now hosting the Unofficial fix:

http://castlecops.com/t143199-Is_it_still_recommended_to_unregister_shimgvw_dll.html

Microsoft:

http://www.microsoft.com/technet/security/advisory/912840.mspx

Men occasionally stumble over the truth, but most of them pick themselves up and hurry off as if nothing ever happened.

Sir Winston Churchill

 

[Sympology]

The fix has been confirmed as 10th as part of the main fix round up.
MS say part of the reason is to give 3rd party vendors time to test and also to allow Sysadmins to plan for rollout.

Stu..

Only the truly stupid believe they know everything.
Stu.. 2004

 

[eyec]

if you are not sure of the 3rd party patch and until MS releases the patch another option would be to change the file association actions for WMF files; edit the properties and delete the actions of Open and Print or any other actions listed.

once the MS patch is released you can change it back.

 

[luisofp]

change file association for WMF files: NO. Files can arrives with other extensions (jpg, bmp, ...)

Patch with not-official Ilfak Guilfanov's patch: YES. Later, you can uninstall it and apply official microsoft path (at 10/1/2006!!!).

 

[MasterRacker]

According to this the temporary fix is to unregister the Windows Picture and Fax Viewer until the patch is released.

<sub>Jeff
[purple]It's never too early to begin preparing for [/purple]International Talk Like a Pirate Day

"The software I buy sucks, The software I write sucks. It's time to give up and have a beer..." - Me</sub>

 

[JimInKS]

Unfortunately, I don't think remediation is as simple as the two previous posts might suggest. For plenty of reading on the subject, may I suggest:

http://isc.sans.org

 

[MasterRacker]

No one is claiming the previous posts are full fixes. They are temporary stopgaps to tide us over until a full patch is released.

<sub>Jeff
[purple]It's never too early to begin preparing for [/purple]International Talk Like a Pirate Day

"The software I buy sucks, The software I write sucks. It's time to give up and have a beer..." - Me</sub>

 

[aquias]

And patch day for the WMF exploit comes early...

http://www.microsoft.com/technet/security/bulletin/ms06-001.mspx

The patch has been released to correct this vulnerability.

 

[mmendes]

Has anybody had or heard of any problems with this new patch?