Prez wrote on Oct 17, 2012, 19:51: I'll do the next best thing and turn the client off until I actually am going to use it. Normally I leave it running as long as my PC is on. I already use Chrome as my browser.
That won't help because the browser will launch Steam to execute these URL's if it is not already running. That is the whole idea of having these Steam-specific URL's in the first place.
Valve needs to autoupdate Steam to get rid of the URL handler as an immediate step to blunt this attack, but the Steam website is full of the URL's so it's going to break all that functionality.