New 0-day WMF "Exploit"

Quote:

---

Originally posted here by jockey0109
well HTRegz...I want to download the file but I am not sure if it will INFECT my PC, make it useless or do something extrememyly harmful....and one more thing :

How do I remove it from the explorer...I mean how do I delete it form my computer after ai make sure that I crashes the computer??? I know explorer wont help...will the DOS come handy???

And I ask you a simple question : I have heard a lot about GDI ... Hopefully it stands for "GRPAHICS DISPLAY _______ " ( please fill in the blanks) and explain what it is.

Another request : can you tell me the proper functioning of this file...I mean I want to know what exactly is the role of the Windows MEtadata file??? And how does it affect windows explorer??

~Jockey

---

Alrighty... I'll try to decipher this as best I can..

The file is a PoC DoS... it does nothing beyond crash explorer.

You remove it by first off NOT extracting it to your desktop (this would continually crash explorer everytime it loaded... but to another folder.. When you want to delete it, open your command prompt and navigate to it.

GDI = Graphical Device Interface (a method of taking graphics and outputting them to say your monitor.. ) (google would have very easily told you this)

WMF is essentially another graphic file, it's just using a different method.. it contains commands to draw both vector and raster graphics... You might want to check out http://www.companionsoftware.com/PR/...tafileFaq.html for more information.

Explorer will read the file in order to display information on it... an error in the file should normally cause an exception... in this case you can avoid the exception and kill explorer...

Peace,
HT

Thanks for the link...I have saved the file and will read it... I think I understood half the thing in your post only..but I will read that page for sure...I like this topic.

NOw tell me one very simple thing... How does one ERASE that file after downloading it???

Quote:

---

Originally posted here by jockey0109
Thanks for the link...I have saved the file and will read it... I think I understood half the thing in your post only..but I will read that page for sure...I like this topic.

NOw tell me one very simple thing... How does one ERASE that file after downloading it???

---

Everytime you say that (at least twice now... ) I Have already answered that question

From Above:

Quote:

---

You remove it by first off NOT extracting it to your desktop (this would continually crash explorer everytime it loaded... but to another folder.. When you want to delete it, open your command prompt and navigate to it.

---

I understand that english isn't your first language... but at least read posts a couple times if you don't understand them... especially when the answer is right in front of you.

UH! I was right...and then you did point out at the same LATER..anywez..thanks for that...and your file indeed crashes the computer..explorer crashes everytime I go to the folder I save that file into!