PDA

View Full Version : Disable the WMF virus now!


Dagibit
01-01-2006, 11:34 PM
It's ok to lower your heartbeats now ladies and gentlemen. I've found an article that tells you how to:

"disable the rendering of WMF files using the following hack:

1. Click on the Start button on the taskbar.
2. Click on Run...
3. Type "regsvr32 /u shimgvw.dll" to disable.
4. Click ok when the change dialog appears.

iDefense notes that this workaround may interfere with certain thumbnail images loading correctly, though I have used the hack on my machine and haven't had any problems yet. The company notes that once Microsoft issues a patch, the WMF feature may be enabled again by entering the command "regsvr32 shimgvw.dll" in step three above."

Read Full Article (http://blogs.washingtonpost.com/securityfix/2005/12/exploit_release.html)

Beamtracer
01-01-2006, 11:44 PM
This has already been covered multiple times in the existing thread about this subject:

http://forums.cgsociety.org/showthread.php?t=305676

It was actually mentioned on the first page of the previous thread, then multiple times throughout, including page 3 (http://forums.cgsociety.org/showthread.php?t=305676&page=3&pp=15) and page 4 (http://forums.cgsociety.org/showthread.php?t=305676&page=4&pp=15).

Dagibit
01-01-2006, 11:51 PM
Oh.



Please excuse me then... I should have expected that.

Beamtracer
01-01-2006, 11:53 PM
:) . . . . . . . . . .

ajchung
01-02-2006, 03:34 PM
This has already been covered multiple times in the existing thread about this subject:

http://forums.cgsociety.org/showthread.php?t=305676

It was actually mentioned on the first page of the previous thread, then multiple times throughout, including page 3 (http://forums.cgsociety.org/showthread.php?t=305676&page=3&pp=15) and page 4 (http://forums.cgsociety.org/showthread.php?t=305676&page=4&pp=15).

If you read the later pages, you'll also learn that the "regsvr32 /u shimgvw.dll" workaround doesn't protect you in all circumstances. Opening a malware image file in MSPaint or Lotus Notes (and other programs) will launch the attack. The latest advice is to apply an unofficial patch (http://isc.sans.org/diary.php?storyid=999) that has been vetted by a number of security specialists, since it may be some time before Microsoft comes out with an official patch.

Solothores
01-02-2006, 04:04 PM
After using said command, "copy & paste" stopped to work for me. Fascinating to see, how uncomfortable your computer life is without it.

Cheers
Solo

Beamtracer
01-02-2006, 04:14 PM
Now we've got two threads going about the same thing.

MKR
01-02-2006, 04:18 PM
After using said command, "copy & paste" stopped to work for me. Fascinating to see, how uncomfortable your computer life is without it.

Cheers
Solo

Copy and Paste still works fine for me. Are you using some sort of clipboard manager? Disabling it could have interfered with it.