±Recent Visitors

Recent Visitors to Com-Central!

±User Info-big


Welcome Anonymous

Nickname
Password

Membership:
Latest: HighestAce
New Today: 0
New Yesterday: 0
Overall: 6648

People Online:
Members: 0
Visitors: 992
Total: 992
Who Is Where:
 Visitors:
01: Community Forums
02: Contact
03: Downloads
04: Community Forums
05: Community Forums
06: Community Forums
07: Photo Gallery
08: Community Forums
09: News
10: Member Screenshots
11: Member Screenshots
12: Home
13: Your Account
14: Home
15: Downloads
16: Community Forums
17: Community Forums
18: Community Forums
19: Member Screenshots
20: Community Forums
21: Community Forums
22: Downloads
23: Home
24: Community Forums
25: Home
26: News
27: Community Forums
28: Community Forums
29: Community Forums
30: Downloads
31: Community Forums
32: Downloads
33: Home
34: Community Forums
35: Community Forums
36: Community Forums
37: Home
38: Supporters
39: Member Screenshots
40: Home
41: Community Forums
42: Community Forums
43: News
44: Community Forums
45: News Archive
46: Community Forums
47: Community Forums
48: Member Screenshots
49: Downloads
50: News Archive
51: Home
52: Community Forums
53: Community Forums
54: Home
55: Statistics
56: Community Forums
57: Member Screenshots
58: Community Forums
59: Home
60: Photo Gallery
61: Community Forums
62: Community Forums
63: Home
64: Community Forums
65: Home
66: Community Forums
67: Community Forums
68: Community Forums
69: Community Forums
70: Community Forums
71: News
72: Home
73: Home
74: Community Forums
75: Downloads
76: Tell a Friend
77: Community Forums
78: Community Forums
79: Community Forums
80: Home
81: Community Forums
82: Community Forums
83: News
84: Community Forums
85: News Archive
86: Statistics
87: Home
88: Home
89: Home
90: Community Forums
91: Community Forums
92: Home
93: Community Forums
94: Community Forums
95: Home
96: Community Forums
97: Community Forums
98: Home
99: Community Forums
100: Home
101: News Archive
102: Home
103: Downloads
104: Home
105: Photo Gallery
106: Community Forums
107: Community Forums
108: Downloads
109: Your Account
110: Home
111: Community Forums
112: Community Forums
113: Community Forums
114: Community Forums
115: Home
116: Community Forums
117: Community Forums
118: Home
119: Community Forums
120: Community Forums
121: Community Forums
122: Downloads
123: Photo Gallery
124: Community Forums
125: Community Forums
126: Photo Gallery
127: Community Forums
128: Home
129: Downloads
130: Home
131: Community Forums
132: Community Forums
133: Community Forums
134: Home
135: Home
136: Home
137: Downloads
138: Your Account
139: Photo Gallery
140: Community Forums
141: Community Forums
142: Community Forums
143: Community Forums
144: Community Forums
145: News Archive
146: Home
147: Search
148: Home
149: Community Forums
150: Home
151: Community Forums
152: Community Forums
153: Community Forums
154: Community Forums
155: Downloads
156: Your Account
157: Community Forums
158: Home
159: Community Forums
160: Home
161: Photo Gallery
162: Community Forums
163: Home
164: Member Screenshots
165: Community Forums
166: News Archive
167: Community Forums
168: Community Forums
169: Community Forums
170: Member Screenshots
171: Member Screenshots
172: Community Forums
173: Home
174: Member Screenshots
175: Photo Gallery
176: Home
177: Community Forums
178: Community Forums
179: Community Forums
180: Community Forums
181: Community Forums
182: Home
183: News Archive
184: Community Forums
185: Downloads
186: Home
187: Community Forums
188: Community Forums
189: Community Forums
190: Home
191: News Archive
192: Community Forums
193: Community Forums
194: Community Forums
195: News
196: Home
197: Community Forums
198: News Archive
199: LinkToUs
200: Home
201: Community Forums
202: Community Forums
203: Community Forums
204: Community Forums
205: News
206: Community Forums
207: Community Forums
208: Community Forums
209: Home
210: Home
211: Home
212: Community Forums
213: Community Forums
214: Photo Gallery
215: Home
216: Community Forums
217: Community Forums
218: Home
219: Community Forums
220: Community Forums
221: Downloads
222: Community Forums
223: Home
224: Community Forums
225: Community Forums
226: Home
227: Supporters
228: Home
229: Community Forums
230: News Archive
231: Community Forums
232: Member Screenshots
233: Community Forums
234: Home
235: Home
236: Photo Gallery
237: Community Forums
238: Member Screenshots
239: Community Forums
240: Community Forums
241: Community Forums
242: Community Forums
243: Community Forums
244: Community Forums
245: Community Forums
246: Home
247: Tell a Friend
248: Community Forums
249: Home
250: Community Forums
251: Home
252: Home
253: Community Forums
254: News Archive
255: Member Screenshots
256: Photo Gallery
257: Community Forums
258: Community Forums
259: Statistics
260: Home
261: Home
262: Home
263: Downloads
264: Community Forums
265: Member Screenshots
266: Downloads
267: Community Forums
268: Community Forums
269: Photo Gallery
270: Community Forums
271: Tell a Friend
272: Home
273: Community Forums
274: Home
275: Downloads
276: Home
277: Member Screenshots
278: Community Forums
279: Community Forums
280: Community Forums
281: Community Forums
282: Home
283: Photo Gallery
284: Community Forums
285: Community Forums
286: Home
287: Home
288: Home
289: Your Account
290: Community Forums
291: Home
292: Downloads
293: Home
294: Community Forums
295: Home
296: Community Forums
297: News
298: Home
299: Member Screenshots
300: Home
301: Community Forums
302: Home
303: Community Forums
304: Community Forums
305: Community Forums
306: Community Forums
307: Community Forums
308: Home
309: Home
310: Community Forums
311: Home
312: Community Forums
313: News
314: Community Forums
315: Community Forums
316: Home
317: Community Forums
318: Community Forums
319: Home
320: Photo Gallery
321: Community Forums
322: Your Account
323: Home
324: Photo Gallery
325: Community Forums
326: News Archive
327: Community Forums
328: Member Screenshots
329: Downloads
330: Member Screenshots
331: Member Screenshots
332: Community Forums
333: Community Forums
334: Community Forums
335: Home
336: Community Forums
337: Community Forums
338: Community Forums
339: Community Forums
340: Community Forums
341: Community Forums
342: News
343: Community Forums
344: Home
345: Home
346: Community Forums
347: Downloads
348: Community Forums
349: Community Forums
350: Home
351: News Archive
352: Community Forums
353: Downloads
354: Community Forums
355: Downloads
356: Community Forums
357: Tell a Friend
358: Home
359: Photo Gallery
360: Community Forums
361: Community Forums
362: Member Screenshots
363: Community Forums
364: Community Forums
365: Community Forums
366: Community Forums
367: Home
368: Home
369: Community Forums
370: Home
371: Community Forums
372: Community Forums
373: Community Forums
374: Community Forums
375: Photo Gallery
376: Home
377: Community Forums
378: Community Forums
379: Downloads
380: Community Forums
381: Home
382: Member Screenshots
383: Your Account
384: Home
385: Community Forums
386: Home
387: Member Screenshots
388: Community Forums
389: Home
390: Community Forums
391: Downloads
392: Community Forums
393: Home
394: Home
395: Community Forums
396: Home
397: Photo Gallery
398: Community Forums
399: Community Forums
400: Community Forums
401: Community Forums
402: Community Forums
403: Community Forums
404: Community Forums
405: Community Forums
406: Member Screenshots
407: Community Forums
408: Photo Gallery
409: Community Forums
410: Community Forums
411: Member Screenshots
412: Community Forums
413: Member Screenshots
414: Community Forums
415: Community Forums
416: Member Screenshots
417: Home
418: Community Forums
419: Community Forums
420: Community Forums
421: Community Forums
422: Your Account
423: Member Screenshots
424: Community Forums
425: Community Forums
426: Community Forums
427: Home
428: Community Forums
429: Community Forums
430: Photo Gallery
431: Community Forums
432: Downloads
433: Community Forums
434: Community Forums
435: Home
436: Home
437: Community Forums
438: Community Forums
439: Community Forums
440: Community Forums
441: Community Forums
442: Community Forums
443: Community Forums
444: Community Forums
445: Community Forums
446: Community Forums
447: Home
448: Community Forums
449: Community Forums
450: Home
451: Community Forums
452: Community Forums
453: Community Forums
454: Home
455: Community Forums
456: Community Forums
457: Community Forums
458: Downloads
459: Home
460: Community Forums
461: Community Forums
462: Community Forums
463: Home
464: Home
465: Home
466: Community Forums
467: Home
468: Community Forums
469: Home
470: Home
471: Community Forums
472: Home
473: Community Forums
474: Downloads
475: Community Forums
476: Home
477: Home
478: Photo Gallery
479: Home
480: Community Forums
481: Community Forums
482: Downloads
483: Downloads
484: Member Screenshots
485: Community Forums
486: Supporters
487: Community Forums
488: Downloads
489: Community Forums
490: Member Screenshots
491: Community Forums
492: Downloads
493: Community Forums
494: Home
495: Community Forums
496: Community Forums
497: Community Forums
498: Your Account
499: Member Screenshots
500: Community Forums
501: Community Forums
502: Community Forums
503: Community Forums
504: Community Forums
505: Community Forums
506: Community Forums
507: Community Forums
508: Downloads
509: Home
510: Home
511: Community Forums
512: Downloads
513: Community Forums
514: Home
515: News Archive
516: Home
517: Community Forums
518: Home
519: Community Forums
520: Community Forums
521: Member Screenshots
522: News Archive
523: Photo Gallery
524: News Archive
525: Community Forums
526: Community Forums
527: Community Forums
528: Home
529: Community Forums
530: Member Screenshots
531: Community Forums
532: Community Forums
533: Community Forums
534: Community Forums
535: Home
536: Community Forums
537: Community Forums
538: Community Forums
539: Community Forums
540: Community Forums
541: Community Forums
542: Downloads
543: Community Forums
544: Your Account
545: Member Screenshots
546: Community Forums
547: Community Forums
548: Community Forums
549: Member Screenshots
550: Photo Gallery
551: Home
552: Home
553: Community Forums
554: Community Forums
555: Home
556: Home
557: Community Forums
558: News Archive
559: Home
560: Community Forums
561: Community Forums
562: Community Forums
563: Home
564: Your Account
565: Downloads
566: Community Forums
567: Member Screenshots
568: Community Forums
569: Downloads
570: Home
571: Community Forums
572: Community Forums
573: Downloads
574: Community Forums
575: Home
576: Community Forums
577: Community Forums
578: Member Screenshots
579: Community Forums
580: Home
581: Home
582: Home
583: Home
584: Home
585: Tell a Friend
586: Home
587: Home
588: Community Forums
589: Downloads
590: Community Forums
591: Community Forums
592: Community Forums
593: Community Forums
594: Community Forums
595: Community Forums
596: Home
597: Community Forums
598: Community Forums
599: Community Forums
600: Community Forums
601: News Archive
602: Community Forums
603: Community Forums
604: Photo Gallery
605: Home
606: Community Forums
607: Community Forums
608: Home
609: Community Forums
610: Home
611: Community Forums
612: Community Forums
613: News
614: Community Forums
615: Community Forums
616: Home
617: Community Forums
618: Home
619: Downloads
620: Member Screenshots
621: Community Forums
622: Community Forums
623: Community Forums
624: Community Forums
625: Home
626: Your Account
627: Home
628: Community Forums
629: Community Forums
630: Community Forums
631: Home
632: Home
633: Home
634: Community Forums
635: Your Account
636: Your Account
637: Home
638: Community Forums
639: Home
640: Community Forums
641: Downloads
642: News Archive
643: Community Forums
644: Community Forums
645: Home
646: Community Forums
647: Photo Gallery
648: Home
649: Home
650: Member Screenshots
651: News Archive
652: News
653: Community Forums
654: Community Forums
655: Home
656: Home
657: Home
658: Community Forums
659: Community Forums
660: Community Forums
661: Community Forums
662: Home
663: Community Forums
664: Downloads
665: Community Forums
666: Photo Gallery
667: Treasury
668: Community Forums
669: Community Forums
670: Downloads
671: Community Forums
672: Community Forums
673: Downloads
674: Home
675: Member Screenshots
676: News Archive
677: Photo Gallery
678: Downloads
679: Member Screenshots
680: Member Screenshots
681: Home
682: Community Forums
683: Photo Gallery
684: Home
685: Community Forums
686: Community Forums
687: Community Forums
688: Member Screenshots
689: Photo Gallery
690: Community Forums
691: Community Forums
692: Community Forums
693: Home
694: Home
695: Community Forums
696: Your Account
697: News Archive
698: Home
699: Home
700: Your Account
701: Downloads
702: Community Forums
703: Downloads
704: Community Forums
705: Community Forums
706: Statistics
707: Community Forums
708: Home
709: Community Forums
710: Community Forums
711: Community Forums
712: Community Forums
713: Home
714: Community Forums
715: Community Forums
716: Community Forums
717: Photo Gallery
718: Community Forums
719: Community Forums
720: Community Forums
721: News Archive
722: Home
723: Community Forums
724: Community Forums
725: Member Screenshots
726: Search
727: Community Forums
728: Member Screenshots
729: Home
730: Community Forums
731: Community Forums
732: Community Forums
733: Community Forums
734: Community Forums
735: Search
736: Community Forums
737: Community Forums
738: Home
739: News Archive
740: Community Forums
741: Community Forums
742: Community Forums
743: Member Screenshots
744: Community Forums
745: Community Forums
746: Home
747: Home
748: Home
749: Member Screenshots
750: Community Forums
751: Community Forums
752: Downloads
753: Community Forums
754: Community Forums
755: Community Forums
756: Home
757: Home
758: Home
759: Community Forums
760: Home
761: Community Forums
762: Home
763: News Archive
764: Member Screenshots
765: Home
766: Member Screenshots
767: Home
768: Community Forums
769: Home
770: Downloads
771: Downloads
772: Downloads
773: Community Forums
774: Community Forums
775: Home
776: Community Forums
777: Downloads
778: Community Forums
779: Home
780: Home
781: Home
782: Community Forums
783: Home
784: Home
785: Community Forums
786: Photo Gallery
787: Downloads
788: Home
789: Community Forums
790: Community Forums
791: Member Screenshots
792: Member Screenshots
793: Community Forums
794: Home
795: Community Forums
796: Community Forums
797: Community Forums
798: Community Forums
799: Community Forums
800: Community Forums
801: Member Screenshots
802: Downloads
803: Photo Gallery
804: Community Forums
805: Home
806: Community Forums
807: Downloads
808: Downloads
809: Community Forums
810: Community Forums
811: Community Forums
812: Home
813: Community Forums
814: Member Screenshots
815: Home
816: Community Forums
817: Home
818: Home
819: Community Forums
820: Community Forums
821: Photo Gallery
822: Member Screenshots
823: Community Forums
824: Downloads
825: Home
826: Member Screenshots
827: Community Forums
828: Home
829: Home
830: Community Forums
831: Search
832: Community Forums
833: Community Forums
834: Community Forums
835: Community Forums
836: Downloads
837: Community Forums
838: Photo Gallery
839: Home
840: Home
841: Community Forums
842: Photo Gallery
843: Community Forums
844: Community Forums
845: Photo Gallery
846: Community Forums
847: Home
848: Community Forums
849: Home
850: Community Forums
851: Community Forums
852: Community Forums
853: Home
854: Community Forums
855: Member Screenshots
856: Community Forums
857: Photo Gallery
858: News
859: Community Forums
860: Community Forums
861: Home
862: Downloads
863: Statistics
864: Home
865: Your Account
866: Community Forums
867: Community Forums
868: Community Forums
869: Home
870: Community Forums
871: Community Forums
872: Community Forums
873: Community Forums
874: Tell a Friend
875: Member Screenshots
876: Home
877: Community Forums
878: Home
879: Community Forums
880: Community Forums
881: Community Forums
882: Downloads
883: Your Account
884: Community Forums
885: Community Forums
886: Community Forums
887: Member Screenshots
888: Member Screenshots
889: Home
890: Member Screenshots
891: Community Forums
892: Photo Gallery
893: Community Forums
894: Home
895: Community Forums
896: Home
897: Community Forums
898: Home
899: Home
900: Community Forums
901: Photo Gallery
902: Community Forums
903: Home
904: Community Forums
905: Home
906: Home
907: Home
908: Community Forums
909: Home
910: Home
911: Community Forums
912: Community Forums
913: Community Forums
914: Home
915: Home
916: Home
917: Member Screenshots
918: Community Forums
919: Community Forums
920: Community Forums
921: Community Forums
922: Home
923: Member Screenshots
924: News
925: Home
926: Photo Gallery
927: Your Account
928: Community Forums
929: Community Forums
930: Community Forums
931: Community Forums
932: Photo Gallery
933: Member Screenshots
934: Community Forums
935: Home
936: Community Forums
937: Home
938: Member Screenshots
939: Downloads
940: Home
941: Downloads
942: Home
943: Community Forums
944: Community Forums
945: Photo Gallery
946: Home
947: Community Forums
948: Member Screenshots
949: Community Forums
950: Community Forums
951: Home
952: Community Forums
953: Community Forums
954: Home
955: Community Forums
956: Community Forums
957: Statistics
958: Photo Gallery
959: Home
960: Member Screenshots
961: Community Forums
962: Search
963: Community Forums
964: Downloads
965: Community Forums
966: Downloads
967: Downloads
968: Community Forums
969: Photo Gallery
970: Community Forums
971: Community Forums
972: Photo Gallery
973: Home
974: Home
975: Community Forums
976: Photo Gallery
977: Home
978: Home
979: Community Forums
980: Member Screenshots
981: Community Forums
982: Downloads
983: Community Forums
984: Home
985: Community Forums
986: Home
987: Home
988: Photo Gallery
989: Home
990: Community Forums
991: Community Forums
992: Your Account

Staff Online:

No staff members are online!
This looks like a bad one! :: Archived
Resolve issues with your computer problems here or read about the latest computer parts and information.
Post new topic    Revive this topic    Printer Friendly Page     Forum Index ›  Hardware

Topic Archived View previous topic :: View next topic  
Author Message
JG300-Ascout
Power User

Offline Offline
Joined: Jan 05, 2005
Posts: 6257
Location: Cyberspace
PostPosted: Sun Jan 01, 2006 5:53 pm
Post subject: This looks like a bad one!

www.foxnews.com/story/...44,00.html

Advice on impementing the fix from y'all?
__________________________________________________________
'Extremely Critical Flaw' in Windows Discovered, Already Exploited
Friday, December 30, 2005
By Lisa Vaas




Microsoft Corp. has issued a security advisory for what Secunia is deeming an "extremely critical flaw" in Windows Metafile Format (.wmf) that is now being exploited on fully patched systems by malicious attackers.
Websense Security Labs is tracking thousands of sites distributing the exploit code from a site called iFrameCASH BUSINESS.
That site and numerous others are distributing spyware and other unwanted software, replacing users' desktop backgrounds with a message that warns of spyware infection and which prompts the user to enter credit card information to pay for a "spyware cleaning" application to remove the detected spyware.
Vulnerable operating systems include a slew of Windows Server 2003 editions: Datacenter Edition, Enterprise Edition, Standard Edition and Web Edition.
Also at risk are Windows XP Home Edition and Windows XP Professional, making both home users and businesses open to attack.
In this fluid attack, researchers have kept up a steady stream of new details about the extent of the exploit's reach, with Google Desktop being the latest reported vector.
F-Secure reported on Wednesday that Google Desktop tries to index image files with the exploit, executing it in the process. F-Secure reports that this exploitation-via-indexing may wind up occurring with other desktop search engines as well.
(Story continues below)


Google had no immediate comment. To avoid the problem, security experts suggest disabling the feature's indexing of media files, or to remove Google Desktop altogether.
A workaround called REGSVR32 has been posted and was included in Microsoft's advisory. However, it should be noted that as of Thursday evening, some security researchers were reporting that the workaround is not fully successful.
The workaround is as follows, as quoted from the advisory:
Un-register the Windows Picture and Fax Viewer (Shimgvw.dll)
1. Click Start, click Run, type "regsvr32 -u %windir%system32shimgvw.dll" (without the quotation marks), and then click OK.
2. A dialog box appears to confirm that the un-registration process has succeeded.
� Click OK to close the dialog box.
Impact of Workaround: The Windows Picture and Fax Viewer will no longer be started when users click on a link to an image type that is associated with the Windows Picture and Fax Viewer.
To undo this change, re-register Shimgvw.dll by following the above steps. Replace the text in Step 1 with "regsvr32 %windir%system32shimgvw.dll" (without the quotation marks).
F-Secure notes that this workaround beats filtering .wmf files, given that files with other image extensions � such as BMP, GIF, JPG, JPEG, TIFF, etc. � can be used to exploit machines.
F-Secure also recommends filtering domains at corporate firewalls. These sites should be listed as off-limits:
toolbarbiz.business
toolbarsite.biz
toolbartraff.biz
toolbarurl.biz
buytoolbar.biz
buytraff.biz
iframebiz.biz
iframecash.biz
iframesite.biz
iframetraff.biz
iframeurl.business
F-Secure notes that it's seen 57 versions of this malicious .wmf file exploit as of Thursday, detected as PFV-Exploit.
The security firm is predicting that, even though the exploit has only been used to install spyware or fake antispyware/antivirus software thus far, it anticipates that real viruses will start to spread soon.
According to the Sunbelt Software blog, "any application that automatically displays a WMF image" can be a vector for infection, including older versions of Firefox, current versions of Opera, Outlook and all current versions of Internet Explorer on all Windows versions.
"This is a zero-day exploit, the kind that give security researchers cold chills," according to Sunbelt's blog. "You can get infected by simply viewing an infected WMF image."
According to F-Secure, Trojan downloaders are taking advantage of the vulnerability to install Trojan-Downloader.Win32.Agent.abs, Trojan-Dropper.Win32.Small.zp, Trojan.Win32.Small.ga and Trojan.Win32.Small.ev.
F-Secure also reports that some of the Trojans install hoax anti-malware programs such as Avgold.
F-Secure traced the exploit to Russian sites, one of which is allegedly registered to former Soviet Union President Mikhail Gorbachev.
Sunbelt warns that users are likely to get infected by being directed to one of the sites via spam that offer dirty pictures, free software or other bait.
The attack works by tricking users into opening malicious ".wmf" files in "Windows Picture and Fax Viewer" or by previewing such a file by selecting it in Windows Explorer. The attack can also be triggered automatically when visiting malicious Web sites via Internet Explorer.
Although Secunia deemed the flaw highly critical, at least one security researcher was dismissive of the bug's severity.
Pete Lindstrom, research director for Spire Security LLC, said that at this stage in the game, anything that requires user interaction is hardly worth notice.
"There's no such thing as 'extremely critical' when user interaction is required," Lindstrom said. "That's just silly."
But as far as using IE goes, download of malicious software is automatic, happening immediately upon going to the site, pointed out Alex Eckelberry, president of Sunbelt Software.
"There is no user interaction required," he wrote in an e-mail exchange. "You hit the Web site, you get hit immediately. No prompts, nothing."
John Pescatore, an analyst with Gartner Inc., said that this type of attack may be slowed down by requiring users to click on a malicious .wmf file or to go to a malicious Web site, but that doesn't mean it won't spread fast, given users' willingness to click on bait.
"One of these [attacks] where clicking on a URL [is involved], those can spread pretty fast," he said, given users' proclivity to click away.
"We do online consumer studies. Two years ago, 30 percent had fallen for phishing [schemes]. They entered their user name, password or credit card information. This year, many fewer completely fell for them, but they still clicked on the link in the phishing e-mail."
Given the rise of keystroke loggers that can automatically be downloaded onto a user's system after the user visits a malicious site, that means the Web-surfing population is still ripe for phishing, Pescatore said.
"They're still clicking on links, and whenever malicious software gets installed, that's when you get a critical rating, because all sorts of bad things can happen."
According to Secunia, the vulnerability is caused by an error in handling corrupted .wmf files � a graphics file format used to exchange graphics information between Microsoft Windows applications that can hold vector and bit-mapped images.
Secunia confirmed the vulnerability on a fully patched system running Windows XP SP2. The advisory said that Windows Server 2003 SP0 and SP1 systems have also reportedly been affected.
A Microsoft spokesman told eWEEK in an e-mail exchange on Wednesday that Microsoft "is investigating new public reports of a possible vulnerability in Windows," although he didn't give an ETA for a patch.
"Microsoft will continue to investigate the public reports to help provide additional guidance for customers," he said. "Upon completion of this investigation, Microsoft will take the appropriate action to protect our customers, which may include providing a fix through our monthly release process or issuing a security advisory, depending on customer needs."
The spokesman went on to encourage customers to follow Microsoft's Protect Your PC guidelines of enabling a firewall, getting software updates and installing anti-virus software.
Customers who think they've been affected can also contact Product Support Services, which is at 1-866-PCSAFETY in North America or at support.microsoft.com/security for outside North America.
Microsoft also advises customers who think they've been attacked to contact their local FBI office or to post the incident on www.ifccfbi.gov. Customers outside the United States should contact the national law enforcement agency in their country, the spokesman said.
The advisory issued by Microsoft later on Wednesday said that Microsoft is aware of the code, which allows an attacker "to execute arbitrary code in the security context of the logged-on user, when such user is visiting a Web site that contains a specially crafted Windows Metafile (WMF) image."
Microsoft's advisory echoed Lindstrom's take, however, stating that attackers have "no way to force users to visit a malicious Web site."
Instead, the advisory continued, attackers have to persuade users to visit the sites, "typically by getting them to click a link that takes them to the attacker's Web site."
The advisory said that Microsoft would either be issuing a patch through its monthly release process or would provide an out-of-cycle security update, "depending on customer needs."
Microsoft's spokesman declined to state how many customers had reported that they had been victimized by the attack.
Secunia advised that users avoid opening or previewing untrusted .wmf files, as well as set security level to "High" in IE.
Lindstrom noted that the long-term answer to dealing with what he called this type of "flotsam and jetsam" of constant security alerts is to install host intrusion prevention software to designate what software is allowed to run on a system and what it's allowed to do.
As far as the short-term response to this particular vulnerability goes, Lindstrom echoed Secunia's advisory when it comes to untrusted files: "Don't click on it," he said.
Editor's Note: This story was updated to include Microsoft's statement, more on the recommended workaround and more details about the exploit from Sunbelt and F-Secure.

_________________
"All facts go to clearly prove that Shades is a thrice-cursed traitor & mentally deranged person steeped in inveterate enmity toward mankind"
Back to top
View user's profile Photo Gallery
Shadow_Bshwackr
Janitor

Offline Offline
Joined: Jan 21, 2005
Posts: 7019
Location: Central Illinois, USA
PostPosted: Wed Jan 04, 2006 11:51 am
Post subject: Re: This looks like a bad one!

Thanks for the heads up on this one Ascout! I don't know about anyone else, but I like and use WMP quite often... Wink
Back to top
View user's profile Visit poster's website Photo Gallery
Display posts from previous:   
Post new topic    Revive this topic    Printer Friendly Page    Forum Index ›  Hardware
Page 1 of 1
All times are GMT - 6 Hours

Archive Revive
Username:
This is an archived topic - your reply will not be appended here.
Instead, a new topic will be generated in the active forum.
The new topic will provide a reference link to this archived topic.