Urgent Notice on Microsoft WMF vulnerabilities as long as you read the picture, the trojan will appear.

First, let's talk about the hazards of this s B vulnerability.

As long as you see the picture, it will be a Trojan.

Sent to phantom brigade http://www.ph4nt0m.org/bbs/showthread.php? S = & postid = 65399 # post65399

Run regsvr32.exe/u shimgvw. dll in cmd.

Run the command to prohibit wmfexecution. Generally, regsvr32.exe is under system32. If not, search for it by yourself.

Envymask

This method can only prevent the vulnerability from being triggered by calling Image Viewer via IE.

I provide my temporary solution

Kill SFC first, and try to solve this problem.
Open gdi32.dll with uedit32 and search for 53 57 ff D0 85 C0
Change to 33 C0 90 90 85 C0 and restart

Windows 2003 SP1 is successfully tested.

A Discussion of https://www.xfocus.net/bbs/index.php? Act = sT & F = 1 & t = 57753

Anjishui DistrictI strongly suspect that this WMF vulnerability is a backdoor left by Microsoft.

Overflow Code sorry cannot be published by yourself