Re: Is this a new exploit? Dec 28 2005 02:14PM
Andreas Marx (gega-it web de)

yes, it seems to be a new exploit. More details about the problem can be found here:

Some AV companies have created signatures for the latest critter already:

AntiVir TR/Dldr.WMF.Small
Dr Web Exploit.MS05-053
F-Secure Exploit.Win32.Agent.r
Fortinet W32/WMF-exploit
Kaspersky Exploit.Win32.Agent.r
McAfee (BETA) Exploit-WMF trojan
Symantec (BETA) Download.Trojan

Andreas Marx

Warning the following URL successfully exploited a fully patched windows xp system with a freshly updated norton anti virus.


The url runs a .wmf and executes the virus, f-secure will pick up the virus norton will not.

XXL-Speicher, PC-Virenschutz, Spartarife & mehr: Nur im WEB.DE Club!
Jetzt gratis testen!

[ reply ]


Privacy Statement
Copyright 2010, SecurityFocus