Security issue

 

Microsoft has officially accepted that 'image files' can contain virus due to a vulnerability of Windows.

http://www.microsoft.com/technet/security/advisory/912840.mspx

It means that you can get virus from image files that you receive by email or ... in a forum like this.

(In this forum nobody has published an image with virus but this could happen in any forum).

Some virus are currently using this feature:

Trojan-Downloader.Win32.Agent.abs

Trojan-Dropper.Win32.Small.zp,

Trojan.Win32.Small.ga

Trojan.Win32.Small.ev.

TROJ_NASCENE.A

TROJ_NASCENE.B

TROJ_NASCENE.C

TROJ_NASCENE.D

Microsoft is going to launch a FIX on date 10 january, until it comes you can:

- Install temporary patch at http://www.hexblog.com/2005/12/wmf_vuln.html

 

thanks

i just spent the last two days fighting off one of these... it installed an application called mssearchnet.exe which would popup false security messages about my computer being infected with spyware and that is was about to crash unless i clicked on one of the links it generated. real p.i.t.a.

This mssearchnet.exe imbeds itself within the explorer software, and when captured by ad-aware se, spybot S & D, and/or McAfee virus scan, will use System Restore to reinstall itself.

Had to disable System Restore, reboot into safe mode, delete, virus scan/fix, spybot scan/fix, run cleanmgr.exe, defrag, and reboot into normal mode before (i think and hope) it has been finally removed.

ZoneAlarm Pro, the spybot software (including Spywareblaster) and McAfee did not catch this before it was installed...

 

Been there done that, get Panda internet security, it catches everything, even things you have been using for years it will delete if it is thinks it is harmfull. I will never go back to Norton or any other antivirus/spyware software

Reason: