New Windows Trojan?

[Lilaena De'Ville]

Any one heard about this? Microsoft isn't coming out with a patch for it until Tuesday, apparently. They sent an email around at work yesterday about it.

[Morgan Evanar]

Yes there is one, no we can't do anything about it until it's patched. Don't click .wmf files.

[Yog]

Apparently, if you were using Internet Explorer, you did not even have to click anything. Just viewing a webpage with .wmf images could be enough to trigger the code without warning. Firefox and Opera prompts the user before executing any such harmful code. In any case, you should be mindful of what websites you visit.

MS finally reacted today, and released a patch:

Security Bulletin Security Update for Windows XP (KB912919) (http://www.microsoft.com/technet/security/bulletin/MS06-001.mspx>MS06-001</a>

<a)