Technology Computer & Networking security

WMF Exploit: Workaround

< Continued from page 1

Jan 5, 2006: A day after announcing they would not release a patch outside of the normal 'Patch Tuesday' cycle, Microsoft buckled to consumer sentiment and released a patch to protect against the WMF exploit for XP/2003/2000 users. A patch was not provided for Windows 98 or ME users, though that OS is also vulnerable to the flaw. >> Details on the WMF Patch Release

The Iflak patch previously recommended on this page is no longer avaialable for download from its creator.


Windows XP/2000/2003 users should install the the patch from Microsoft instead. If you had installed the Ilfak patch, you need to remove it before installing the Microsoft patch. When you are ready to remove Ilfak's patch, it will be listed in Windows Add/Remove Programs as "Windows WMF Metafile Vulnerability HotFix".

For those who unregistered shimgvw.dll and wish to reregister it, click Start, click Run, and type:

regsvr32 shimgvw.dll Then click OK. You will receive an alert telling you that "DllRegisterServer in shimgvw.dll succeeded". Click OK. (I chose to leave shimgvw.dll unregistered on my systems, even though I also applied Iflak's patch).
Note: If you have multiple accounts on the system, you may need to unregister shimgvw.dll for each account. If you choose to leave it unregistered, you may have to reassign file associations for certain image files, otherwise these image files may no longer open. For instructions on changing file associations, see the tutorial on Windows File Associations.

Windows 98 and ME Users
Unfortunately, there is no known workaround for users of Windows 98 and Windows ME. However, there are specific steps you can take to beef up your security (that don't involve buying a Mac). Follow the tips outlined in Staying Safe On a Hostile Internet.

Also see:
SHARE
RELATED POSTS on "Technology"
Home Security Systems: Which One Should I Get For My Family
Home Security Systems: Which One Should I Get For My Family
How to Protect Yourself From Fake Antivirus Programs and Other Scamware/Scareware
How to Protect Yourself From Fake Antivirus Programs and Other Scamware/Scareware
Another Facebook Spam E-mail Again?
Another Facebook Spam E-mail Again?
Using Free Anti Adware and Spyware - Tips To Keep Your PC Safe
Using Free Anti Adware and Spyware - Tips To Keep Your PC Safe
Is Online Data Backup Part of Your Disaster Recovery Plan?
Is Online Data Backup Part of Your Disaster Recovery Plan?
How To Recover Deleted Emails From Outlook?
How To Recover Deleted Emails From Outlook?
AVGRsstx DLL Error Fix
AVGRsstx DLL Error Fix
Virtualized datacenter: Greatly in demand!
Virtualized datacenter: Greatly in demand!
Cybercrime In the Workplace
Cybercrime In the Workplace
Automatic Manual Virus and Spyware Removal
Automatic Manual Virus and Spyware Removal
Data Recovery Is Easy In Notebook Repairs
Data Recovery Is Easy In Notebook Repairs
What Is Windows Defence Unit - How to Fix Windows Defence Unit Automatically
What Is Windows Defence Unit - How to Fix Windows Defence Unit Automatically
What Are Students Spending Most Time On?
What Are Students Spending Most Time On?
Deleted Mp3 Recovery - How to Restore Deleted Mp3 Files Easily
Deleted Mp3 Recovery - How to Restore Deleted Mp3 Files Easily
How to Install & Adjust the Extractor on the M-1911
How to Install & Adjust the Extractor on the M-1911
Home Security Cameras Provide Additional Reassurance
Home Security Cameras Provide Additional Reassurance
How to Recover Digital Pictures and Raw Images: an Easy Way
How to Recover Digital Pictures and Raw Images: an Easy Way
Data Recovery Vendor Considerations
Data Recovery Vendor Considerations
Resolving “The Delegate page is not available” Exchange Server Error
Resolving “The Delegate page is not available” Exchange Server Error
Malware Software to Remove Spyware and Adware in Computer
Malware Software to Remove Spyware and Adware in Computer

Leave Your Reply

*