Alexander’s Blog

With Windows Media Components for QuickTime, by Flip4Mac, you can play Windows Media files (.wma and .wmv) directly in QuickTime Player and view Windows Media content on the Internet using a Web browser.

System requirements include the following:
1. Mac OS X version 10.3.9 or later
2. QuickTime version 6.5 or later

Before you install Windows Media Components for QuickTime, make sure that your Mac OS X user account has read and write access. If your login account does not allow you to administer the computer you will be asked for an administrator name and password during the installation.

If you want to quickly empty your recycle bin, instead of minimizing the desktop and going to the Recycle Bin you can simply right click any file on your computer and select Empty Recycle Bin. Here’s how.

Save the following entries in a text editor as a .REG file (e.g. emptybin.reg). Logon with an account that has administrative privileges. Double-click the .reg file to modify the registry. You will be prompted to add the information to the registry. You should see the Empty Recycle Bin added to the context menu for all files.

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\Empty Recycle Bin]
@=”{645FF040-5081-101B-9F08-00AA002F954E}”

I’ve tested this successfully on Windows XP Professional computers. If you can’t get it to work, feel free to contact me.

Update: May 23, 2007: I tested the .reg file successfully on 32-bit Windows Vista.

The SANS Internet Storm Center has put together a comprehensive FAQ about the recently announced WMF zero-day exploit that affects all Windows users. Windows XP, (SP1 and SP2), Windows 2003 are affected by the currently circulating exploits. Other versions may be affected to some extent. Mac OS-X, Unix or BSD is not affected.

The WMF vulnerability uses images (WMF images) to execute arbitrary code. It will execute just by viewing the image. In most cases, you don’t have to click anything. Even images stored on your system may cause the exploit to be triggered if it is indexed by some indexing software. Viewing a directory in Explorer with “Icon size” images will cause the exploit to be triggered as well. Microsoft announced that an official patch will not be available before January 10, 2006 (next regular update cycle).

If you don’t want to wait for Microsoft’s patch then you can download SANS unofficial patch that was developed by Ilfak Guilfanov here (now at v1.4, MD5: 15f0a36ea33f39c1bcf5a98e51d4f4f6). SANS is recommending that you unregister the .dll used to invoke the Windows Picture and Fax Viewer component and apply this unofficial patch for maximum protection. You can unregister the related DLL by going to Start, Run, and then typing regsvr32 -u %windir%\system32\shimgvw.dll. Keep in mind that if you un-register the DLL then make sure that you re-register it and uninstall this “unofficial” patch before applying Microsoft’s official patch.

Here’s the Microsoft’s side of the story…….

On Tuesday, December 27, 2005, Microsoft became aware of public reports of malicious attacks on some customers involving a previously unknown security vulnerability in the Windows Meta File (WMF) code area in the Windows platform. According to Microsoft’s press release, “…all Microsoft’s security updates must pass a series of quality tests, including testing by third parties, to assure customers that they can be deployed effectively in all languages and for all versions of the Windows platform with minimum down time.”

The official patch will be downloadable on January 10, 2006 from Microsoft’s Download Center as well as through Microsoft Update and Windows Update. Customers who use Windows’ Automatic Updates feature will be delivered the fix automatically.