Re: A Very Dangerous Worm in Windows Metafile Images (WMF)

On Sun, 01 Jan 2006 16:18:43 -0800, Mike Monett
<gqtacfwfjfmx@xxxxxxxxxxxxx> wrote:

>To All,
>
> Last night, a very dangerous computer worm was released on the
> internet. It is carried on Windows Metafile images and automatically
> executes with no user interaction. With Microsoft Explorer or
> Outlook, you are automatically infected if you recieve infected
> email or view a site with the worm. The problem is Windows WMF files
> have the capability to execute external code. This is a virus
> writer's dream. He can do anything he wants.
>

It took the genius of Bill Gates to design an os that allows worms to
be resident in viewable images. As I recall, Windows had the same
problem with true jpeg files once.

"When in doubt, execute it."


John


.

Relevant Pages

  • Re: A Very Dangerous Worm in Windows Metafile Images (WMF)
    ... It is carried on Windows Metafile images and automatically ... >> email or view a site with the worm. ... >> have the capability to execute external code. ... Apparently, it turns out, some people with computers are Not Nice. ...
    (sci.electronics.design)
  • Re: A Very Dangerous Worm in Windows Metafile Images (WMF)
    ... what happened to that very dangerous worm... ... > "what Windows did when it encountered this Escape function, ... > followed by the SETABORTPROC metafile record, ... You don't actually execute the metafile. ...
    (sci.electronics.design)
  • Re: A Very Dangerous Worm in Windows Metafile Images (WMF)
    ... It is carried on Windows Metafile images and automatically ... >>> email or view a site with the worm. ... >>> have the capability to execute external code. ... > Apparently, it turns out, some people with computers are Not Nice. ...
    (sci.electronics.design)
  • Re: A Very Dangerous Worm in Windows Metafile Images (WMF)
    ... It is carried on Windows Metafile images and automatically ... >>> email or view a site with the worm. ... >>> have the capability to execute external code. ... > Apparently, it turns out, some people with computers are Not Nice. ...
    (sci.electronics.design)
  • FW: Actions for the Blaster Worm - Special Edition, TechNet Flash
    ... Actions for the Blaster Worm - Special Edition, ... You are receiving this message because you are a Microsoft newsletter ... Presence of the file msblast.exe in the WINDOWS SYSTEM32 directory ... antivirus vendor and scan your machine. ...
    (Focus-Microsoft)
Loading