![Thanks](https://www.renovateforums.com.au/dbtech/thanks/images/thanks.png)
![Likes](https://www.renovateforums.com.au/dbtech/thanks/images/likes.png)
![Needs Pictures](https://www.woodworkforums.com/images/smilies/happy/photo4.gif)
![Picture(s) thanks](https://www.ubeaut.biz/wave.gif)
Results 1 to 12 of 12
Thread: New Virus - Windows .WMF format
-
3rd January 2006, 10:42 AM #1
New Virus - Windows .WMF format
I don't like spreading news of viruses, and usually they turn out to be hoaxes, however the following note has been posted on the Musical Instrument Makers Forum and uploading of pictures has been suspended, so I reckon it's a bit fair dinkum.
May pay to upgrade the virus software chaps, (or get a Mac, or at least use Firefox!)
Also see Google News
Cheers,
P (sorry if this is alarmist, but I'd hate us to become victims!)
From MIMF.com: sysop - 07:59pm Dec 30, 2005 EST (#1 of 24)
Here's how it works. Evil Hackers insert code that will take over your PC into a WMF image. But we're on guard against Evil Hackers and don't allow uploads of WMF files here. But the Forum software is stupid and believes you when you tell it this WMF file is really a JPG - all you need to do is rename it. So the Forum software accepts it as legal, and here it is below. A WMF image I just renamed. If it displays, your PC will be toast if you actually run into an infected image. Image uploads are suspended until further notice.
-
3rd January 2006, 11:08 AM #2
Thanks BM! This explains the wierd email I got yesterday from our email virus checker.
cheers
RR
-
3rd January 2006, 11:19 AM #3
This is on the Wikipedia homepage:
http://en.wikipedia.org/wiki/Windows..._vulnerability
-
3rd January 2006, 11:58 AM #4
That would explain why there was a .wmf file that kept trying to download onto my computer this morning. Thank god for firewalls
Have a nice day - Cheers
-
3rd January 2006, 12:05 PM #5
The really tricky thing seems to be that a .WMF can be disguised with a .JPG rename??
Watch for new trolls bearing images?
P
:eek:
-
3rd January 2006, 09:56 PM #6
Port 6346 is getting a hammering.
Just started today.
Love these firewalls.
Mine has everything blocked except what I specifically allow.
Real pain though with MS updates.
Have to open some large doors for that to work. They keep changing the server.
-
3rd January 2006, 10:27 PM #7
Originally Posted by DavidG
If at first you don't succeed, give something else a go. Life is far too short to waste time trying.
-
4th January 2006, 11:23 AM #8
Add port 8701 to the list.
-
4th January 2006, 11:33 AM #9
Someone's scoffed all my tawny port
Richard
-
4th January 2006, 01:16 PM #10
GOLD MEMBER
- Join Date
- Jun 2003
- Location
- Sunbury, Vic
- Age
- 85
- Posts
- 632
Comsec (Commonwealth Bank Share Service) have also posted a warning about this virus.
Tom
"It's good enough" is low aim
-
4th January 2006, 03:37 PM #11
GOLD MEMBER
- Join Date
- Oct 2002
- Location
- NSW
- Posts
- 0
Seems like a serious one to me!:eek:
The crux of the problem is that the .WMF format is really a collection of instructions to the Windows graphics-drawing code, and this code is allowed to call other Windows code.
Windows looks inside graphics to see if there are any valid instructions, and will decide for itself to treat a .JPG (and possibly others) as a .WMF.
Just viewing an image on a webpage is enough to cause an infection! The image could be a header, a banner, or even a button!
The most promising fix I've seen is to disable a particular library.
Apparently MS haven't produced a patch yet, and *ALL* versions of Windows are vulnerable!
-
5th January 2006, 08:56 AM #12
GOLD MEMBER
- Join Date
- Oct 2002
- Location
- NSW
- Posts
- 0
From the horse's mouth:
http://www.microsoft.com/technet/sec...ry/912840.MSPX
Cheers,
Andrew
Similar Threads
-
Abbot and Costello (04 version for windows)
By Iain in forum JOKESReplies: 0Last Post: 18th August 2004, 09:32 AM -
In regards to round windows...
By sognal in forum NOTHING AT ALL TO DO WITH RENOVATIONReplies: 11Last Post: 28th May 2004, 04:28 PM -
Computer Virus'
By Iain in forum JOKESReplies: 0Last Post: 14th November 2000, 02:14 PM