Trojan delivers unwanted gift to Windows PCs
A new Trojan horse program,exploits hole in Windows systems to sneak onto computers, then dropping adware or spyware or turning them into zombies, according to several Internet security companies.
The Trojan, dubbed Exploit-WMF (Windows Meta File) The exploit "is misusing a function in the WMF library in Windows," dropping onto the machine a downloader Trojan "that pulls down its big brother, a more sophisticated Trojan. "Then it might try to pull down adware, spyware or a bot program," that can turn the computer into a zombie to be used for attacking other machines or sending spam, or just leave a hole on the computer through which sensitive data could be stolen
The WMF vulnerability affects computers running Windows XP with Service Pack 1 and Service Pack 2, as well as Windows Server 2003 with Service Pack 0 and Service Pack 1. It can be exploited when an Internet Explorer user, or Firefox user under certain circumstances, visits a Web site that has malicious code on it or when a user previews .wmf format files with Windows Explorer.
http://news.com.com/Trojan+delivers+...?tag=sas.email
"There are only two ways to live your life. One is as though nothing is a miracle. The other is as though everything is a miracle." --A. Einstein