But nowhere in the advisory posted is the term "WMF" was more what I was trying to say. On closer inspection is does mention WMF only to say this advisory is not related.

http://www.microsoft.com/technet/security/advisory/912920.mspx

"Is this issue related to the recent WMF issue or to Microsoft Security Advisory (912840)? No. The Win32/[EMAIL PROTECTED] worm does not affect the recent WMF vulnerability as reported in Microsoft Security Advisory (912840)."

A removal tool if "already infected" means a vector neutral fix after you've been infected by anything though any vector. This does nothing to prevent the vector.

MS should have immediately released a beta patch w/o testing BS since getting infected is worse than having a few possible issues for some people with some apps/setups who could just uninstall the patch if it caused trouble.

"We'll make buggy software, charge for it, and charge for supporting you finding our bugs but we won't release patches until tested 7 ways from Sunday."


Hayes Elkins wrote:
Right now it's in the form of a repair tool for already infected systems. The *patch* (not a repair tool fix) is set to release via microsoftupdate on Tuesday the 10th.


From: warpmedia <[EMAIL PROTECTED]>
Reply-To: The Hardware List <[email protected]>
To: The Hardware List <[email protected]>
Subject: Re: [H] WMF fix out
Date: Wed, 04 Jan 2006 10:57:12 -0500

Where in this is WMF fix?

Hayes Elkins wrote:

From: Gary Hicks [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 04, 2006 8:31 AM
To: Premier Contacts
Subject: Announcement - Microsoft Security Advisory (912920) Released



This Alert is to advise you that Microsoft Security Advisory (912920), Systems that are infected with Win32/[EMAIL PROTECTED] may download and run malicious files from certain Web domains beginning on January 6, 2006 has been released.





Reply via email to