From: "Rich Gauszka" 


"Glenn Meadows"  wrote in message
news:43b610c6$1{at}w3.nls.net...
>I also might just unregister the dll that controls this, per the MS
>Advisory...till a patch is released.  I would hope that this one gets
>released "out of cycle", as soon as the patch is ready to go.
>
> --
>
There are reports that Lotus Notes and MS Paint can still be exploited even
with the DLL unregistered

http://blogs.zdnet.com/Ou/index.php?m=

Updated again:  Microsoft's official workaround to unregister a certain DLL
file using the command of "regsvr32 /u shimgvw.dll" at the
Start-Run prompt seems to also be very effective.  Unfortunately, it kills
the ability for Windows Explorer to display thumbnail images but I'm afraid
we'll have to live without it until an official patch from Microsoft comes
out (hopefully next month's patch cycle).  There are new reports that there
are certain cases where this fix doesn't work.  MSPaint and Lotus Notes can
still be exploited even with this DLL unregistered.  I think we haven't
heard the end of this one yet and there may be many more applications
vulnerable to this exploit but the combination of hardware-enforced DEP and
unregistering the shimgvw.dll file seems to be very effective for now.]

--- BBBS/NT v4.01 Flag-5