if the hexblog servers are overloaded which they have been often, CastleCops also has copies available. You MUST reboot after installing this. This patch can be removed via add/remove program after Microsoft has issued an official patch which is SUPPOSED to be the 10th of this month.
Please read BOTH links.
http://castlecops.com/t142428-Help_me_Spyware_infection.html
http://castlecops.com/a6436-Newest_WMF_Exploit_Patch_Saves_the_Day.html
I realize that we have multiple threads about this issue but it is a serious issue and we don't want anyone to miss this.
If anybody is interested, you can get a hotfix here: http://www.hexblog.com/

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic