For this WMF exploit: Until Microsoft patches this thing or your AV provider has updated defs, here are some tips 1. Unregister SHIMGVW.DLL. This is your best workaround for the time being (realizing that nothing is perfect). From the command prompt, type REGSVR32 /U SHIMGVW.DLL. A reboot is recommended. (It works post reboot as well.