6 replies to this topic

[gamer_pro_2000]

I found this workaround for the WMF problem that has been recently plagueing the Windows Operating system. It is a workaround that stops Windows from opening potentially harmful files, and is made by F-secure, one of the groups that fist discovered it. So, while M$ is dragging there feet on this one, you can install this and feel "Zero Day" free.

Attached Files

•  WMF_FIX.EXE   361.66K   126 downloads

Edited by gamer_pro_2000, 04 January 2006 - 11:26 PM.

[tc1]

Good find, thanks

[Neon]

thanks for this mate, i know its been a problem.

[atsaunier]

Cool, thankx man

[Nvyseal]

I also suggest scanning your system for the Sober Worm due to hit 1-05-06

Quote

Meanwhile, the buzz around the WMF vulnerability has helped eclipse concerns over the upcoming Sober worm threat. "All of the antivirus guys have put out their signature updates" for the latest incarnation of Sober, and "the payload has been analyzed, so you know what DNS servers it's going to call," Pescatore says. The most important things for IT security professionals to realize is that there is a patch for Sober and that, while the attacks will start by Jan. 5, there will likely be new variants of Sober each subsequent week.

On Jan. 5, the code contained in the Sober worm will start updating and sending itself out to thousands, if not millions, of computers, adds Dunham. So far, the Sober attacks have been more motivated at spreading political and social messages rather than delivering malicious payloads. "Sober has the ability to download code, but the attackers haven't done this," he adds. "Instead, they use it to send spam and clog E-mail servers and promote their agenda."

Signature-based antivirus programs won't have any problems detecting known variants of Sober. New variants will prove a bit trickier, and companies should make sure executable and JPG attachments are stripped out of E-mails traversing their networks, says Shane Coursen, a senior technical consultant for antivirus software maker Kaspersky Lab. For this latest generation of Sober, companies will rely less on signature-based antivirus defenses and more on those that employ heuristic routines that flag strange behavior on the network.

Symantec

Removal Tool:  FixSbr.exe   178.17K   275 downloads

[Neon]

thanks dave

[gamer_pro_2000]

Nvyseal, on Jan 4 2006, 08:08 PM, said:

I also suggest scanning your system for the Sober Worm due to hit 1-05-06
Symantec

Removal Tool: attachment

Yeah, I saw the threat posted on F-secure's site. I'm glad I could help out. I know that this WMF is a really serious problem. M$ isn't plannng on having a fix until Tuesday, so it'll be quite a wait until they get it fixed.