Democratic Underground has news on a new virus and help to prevent it
before Microsoft has new patch.

http://www.democraticunderground.com/discuss/duboard.php?
az=view_all&address=102x2011054

Hackers have created a range of Trojan programs which exploit a
dangerous new Windows Meta File vulnerability. The vulnerability is
rated critical, and so far, no patch has been issued.

The WMF vulnerability exists in computers running Microsoft Windows
XP with SP1 and SP2, and Microsoft Windows Server 2003 and stems from
a flaw in a utility used to view picture and fax files. The security
flaw might be exploited by inducing victims to view maliciously
constructed sites, particularly where IE is used as a browser, or
when previewing *.wmf format files with Windows Explorer.

All I did is to go to Internet Explorer on Start Menu and slide to
HIGHEST security under TOOLS, INTERNET OPTIONS and typed in:

How to disable the buggy code
1. Click on the Start button on the taskbar.
2. Click on Run...
3. Type "regsvr32 /u shimgvw.dll" to disable.
4. Click ok when the change dialog appears.

To reverse, replace the text in line 3 with "regsvr32 shimgvw.dll".

I'm not going to turn off computer but will not check mail until
Microsoft has a patch.

~~~~"Turn your computer off until tomorrow afternoon then check back
and see if there's been a fix yet.This looks pretty nasty, just
fetching your mail can get you.

This was posted on one of the links AngryGirl gave,you can try it if
you want, but don't blame me if you still get infected."

http://blogs.washingtonpost.com/securityfix/2005/12/exp...

http://www.democraticunderground.com/discuss/duboard.php?
az=view_all&address=102x2011054

~~Hackers have created a range of Trojan programs which exploit a
dangerous new Windows Meta File vulnerability. The vulnerability is
rated critical, and so far, no patch has been issued.

The WMF vulnerability exists in computers running Microsoft Windows
XP with SP1 and SP2, and Microsoft Windows Server 2003 and stems from
a flaw in a utility used to view picture and fax files. The security
flaw might be exploited by inducing victims to view maliciously
constructed sites, particularly where IE is used as a browser, or
when previewing *.wmf format files with Windows Explorer.

Windows PCs infected by malware from the Trojan-Downloader Agent-ACD
family are liable to download other malware programs onto a
compromised machine as explained in an analysis by Russian anti-virus
firm Kaspersky Lab here.

Kaspersky advises users not to open untrusted files with a *.wmf
extension. Users should also configure their Internet Explorer
security settings to "high" as a precaution, it recommends. Anti-
virus firms are updating signature definition files to detect the
risk, and protection is now largely in place.