Well, server reaction time was quite slow when I wrote the last post - so I shelved this until now.
Many Anti-virus companys have updated their signatures. Accroding to
German magazine c't the following programmes perform well with
the latest updates:
Andreas Marx from AV-Test (
http://www.av-test.org/
- a company to test anti-virus software ) claims that with date of this morning 10:00
a.m. GMT following programmes recognised all of his 73 WMF-samples:
AntiVir, Avast!, BitDefender, ClamAV, Command, Dr Web, eSafe,
eTrust-INO, eTrust-VET, Ewido, F-Secure, Fortinet, Kaspersky, McAfee,
Nod32, Norman, Panda, Sophos, Symantec, Trend Micro and VirusBuster
Only the scan-engines from QuickHeal (11 nicht erkannt), AVG (13),
F-Prot (54), Ikarus (67) and VBA32 (67) let through the number of
WMF-exploits as listed in brackets....
Anti-Virus programmes seem the best help as deregistering the library
Shimgvw.dll (from Windows Picture and Fax Viewer) doesn't help with all
programmes as
Lotus Notes and
Office 2003 reload that file, if they find it missing!!!!
And also you would have a problem watching pictures with all other programmes....
(By the way - as of yesterday not all the AV-products performed that well - read here the original results from
yesterday's test:
"eTrust (VET), QuickHeal, AntiVir, Dr. Web, Kaspersky und
AVG haben immerhin schon knapp über 80 Prozent identifiziert. Mit
weniger als 20 erkannten Exemplaren ist die Erkennungsleistung von
Command, F-Prot, Ewido, eSafe, Ikarus und VBA32 derzeit noch
mangelhaft. Normans Viren-Scanner versagte in diesem Test völlig und
monierte keine einzige Datei.")