Know this one?

[Brookfield]

AVG has just put a virus in the vault, file name; css[1]wmf, path C/docs & settings. AVG vault shows it as "unknown virus Exploit WMF" [MS DOS]

It's safe now, but what is it's level of potency?

 

[lhuser]

Try healing, if not delete it. It may be Virus residents

 

[Brookfield]

Try healing, if not delete it. It may be Virus residents

AVG say "infected,unable to heal" they always say that, it is contained in their vault, & in the past the guys here have said it's safe there, & also safe to delete from there, it won't infect my system by doing this. [what's "virus residents"?]

I was just wondering how powerful this particular one was.

 

[joxley1990]

I got that!! I got three of them, just yesteday! - these?




I just searched for the files and deleted them

 

[ericf19931]

just go to that file and manually delete the file

 

[Half Evil]

AVG is shit. It has never worked for me. NEVER! Antivir does the job for me.

 

[Brookfield]

I got that!! I got three of them, just yesteday! - these?
I just searched for the files and deleted them

Yes, that's the one, but only one entry, not three like you had, mine were in the virus vault, like yours, I searched for "cff[1].wmf", the name given on a line like yours but found nothing because it was in the vault, strange that you could.

 

[Brookfield]

AVG is shit. It has never worked for me. NEVER! Antivir does the job for me.

My AVG free d/load works perfectly , I have IE & Windows XP, perhaps it's your system?

 

[Bahawolf1]

I searched Google for Exploit-WMF and found this:
http://vil.nai.com/vil/content/v_137760.htm

I also found some information here, but the patch provided at the first link (from Microsoft) should be sufficient:
http://virusbusters.itcs.umich.edu/viruslist/wmf.html

It seems to be a problem specifically related to Windows.. and therefore has been exploited. Luckily, it seems that Microsoft has released a patch or prevention / removal information.

Good luck removing this little bug..
I hope it turns out okay for you.

 

[lhuser]

Put in vault. We're not sre. It may lead to some Trojans...some kind of links