CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 941
Comments: 25
block bottom
spacer spacer

Specific Risks to unregistering shimgvw.dll

 
This forum is locked you cannot post, reply to or edit topics   This topic is locked you cannot edit posts or make replies       All -> FavForums -> Hexblog [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
saffo

Trooper
Trooper


Joined: Jan 04, 2006
Posts: 13
Location: USA

PostPosted: Thu Jan 05, 2006 4:47 pm    Post subject: Specific Risks to unregistering shimgvw.dll
Reply with quote

Can someone please provide real examples of the implications of unregistering this dll? If you have links with more details shimgvw.dll I would be happy to see those as well.

Thanks.

Back to top
View users profile Send private message
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Thu Jan 05, 2006 4:51 pm    Post subject:
Reply with quote

Does #23 answer your question?

CastleCops Link/a6445-WMF_Exploit_FAQ.html


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
saffo

Trooper
Trooper


Joined: Jan 04, 2006
Posts: 13
Location: USA

PostPosted: Thu Jan 05, 2006 5:17 pm    Post subject:
Reply with quote

It does, to a certain extent. I have seen some people post about having problems with specific icons in windows not displaying properly. #23 also does not cover a wide range of third party applications that may or may not be used in the work place.

Thanks

Back to top
View users profile Send private message
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Thu Jan 05, 2006 5:18 pm    Post subject:
Reply with quote

There are too many to list, but the FAQ links to this one:

CastleCops Link/a6446-DEP_not_a_total_solution_to_WMF.html


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
Wim

Guest
IP: 84.192.*.*






PostPosted: Thu Jan 05, 2006 7:48 pm    Post subject:
Reply with quote

I installed the patch and restarted my pc. Already after that, the checker said my pc seemed invulnerable Smile

Is there anything else for me to do, like temporarily unregistering that 1 file, or was that done while doing that install? Thanks

Back to top
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16509

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Sat Jan 07, 2006 5:26 am    Post subject:
Reply with quote

The deregistration of the shimgvw.dll file was to be done as a temporary measure. That action was recommended to temporarily cripple a feature to impede the known exploit of the now-fixed vulnerability. Thus once the MS fix is applied, the shimgvw.dll file can be re-registered to gain back full functionality.

Back to top
View users profile Send private message
lequat

Guest
IP: 84.154.*.*






PostPosted: Mon Jan 09, 2006 9:57 pm    Post subject:
Reply with quote

Ikeb wrote:
The deregistration of the shimgvw.dll file was to be done as a temporary measure. That action was recommended to temporarily cripple a feature to impede the known exploit of the now-fixed vulnerability. Thus once the MS fix is applied, the shimgvw.dll file can be re-registered to gain back full functionality.


How do I re-register the DLL ?

Back to top
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16509

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Mon Jan 09, 2006 10:54 pm    Post subject:
Reply with quote

See item 9 of the WMF FAQ referenced in the header message at the top of each page.

Back to top
View users profile Send private message
Display posts from previous:   
This forum is locked you cannot post, reply to or edit topics   This topic is locked you cannot edit posts or make replies       All -> FavForums -> Hexblog All times are GMT
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer