New Windows Metafile (WMF) 0-day exploit in the wild

[HAN]

One of our members is dealing with this already. At this point, if you get hit, there does not appear to be any way to clean things out!

See the thread for info and f-secure's blog about it...
http://discussions.virtualdr.com/sho...d.php?t=199356

[imadreamer2]

If you have your harddrive partitioned into two or three partitions and you would happen to get hit would you need to format all three partitions or just the c drive? Just in case, it would be nice to know.

[HAN]

imadreamer2: I don't think I've read an answer for your particular question. If the partitions are just different drive letters running under the same operating system (like D, E etc., all on the same physical "C" HD), I would be concerned. If my understanding is correct, once the C drive is exploited, anything on the disk would have to suffer the same fate as C. (That still doesn't necessarily mean data couldn't be salvaged...)

If you have 2 bootable operating systems on one drive, that might be different/better. But I have also read this thing can place rootkit corruptions in Windows system files. So I guess no one really knows how bad this could get...