RE: WMF Vunrability

Anyone interested in trying the beta script, it's at
http://isatools.org/block_wsf.zip.

It's not been through code-review of final approval, so YMMV (works for
me in 2004 SE & EE).

--------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
--------------------------------------------

-----Original Message-----
From: Andy Haigh [mailto:ahaigh@xxxxxxxxxxxxxxxx] 
Sent: Wednesday, January 04, 2006 9:57 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: WMF Vunrability

http://www.ISAserver.org

We have been running anti-wife software since v1.0

So far has worked very well, though there were a couple of close shaves.

Know of others who were not so lucky and got caught out. They didn't
notice anything initially, but all of a sudden they realised they
behaviour and dress was being changed by this malware. They lost control
of what they spent their income on, who they went out with and where
they went.

They were suddenly spurred into action and the removal of this malware
became the prime goal. What they thought would be a simple removal
turned into a painfull and costly process which took a lot of time and
recources.

Finally they are rid of it though!!!!

I have been told that there are versions of the wife malware that
doesn't effect your user experience and I have even heard tales of this
malware actually enhancing it.

You have been warned!!

-----Original Message-----
From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx] 
Sent: Thursday, 5 January 2006 3:33 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: WMF Vunrability

http://www.ISAserver.org

Regarding the wmf vulnerability, the Microsoft Outlook spell-checker
wants to change it to "wife."  Now THAT'S some intuitive damn code!!!

t

-----
"I may disapprove of what you say,
but I will defend to the death your
right to say it."


----- Original Message -----
From: "Greg Mulholland" <greg@xxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 04, 2006 8:20 PM
Subject: [isalist] RE: WMF Vunrability


http://www.ISAserver.org

You've earned you stripes today Harrison :)  nice work

Greg Mulholland

________________________________

From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Thu 5/01/2006 12:57 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: WMF Vunrability



http://www.ISAserver.org

Updated:

HTTP filter settings (you all know how to get there).

1. Extensions:
<choice>
   Set "block specified"
   Add .emf
   Description="application/x-msmetafile"
   Add .wmf
   Description="application/x-msmetafile"
</choice>
<choice>
   Set "allow specified"
   Remove .emf
   Remove .wmf
</choice>
<notachoice>
   Set "allow all"
</notachoice>





------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
thor@xxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ahaigh@xxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.



Other related posts: