SecuriTeam Blogs » Sophos Free Tool To Detect The Windows Shortcut Exploit (.lnk)

Sophos Free Tool To Detect The Windows Shortcut Exploit (.lnk)

July 27th, 2010 by xyberpix, Filed under: Commentary, Full Disclosure

The friendly guys over at Sophos have been kind enough to release a protection tool to protect against the now famous Microsoft LNK 0-day vulnerability. Someone had to do it, it’s a shame it wasn’t Microsoft, but hey.
What this tool does is to replace the current Microsoft icon handler with the Sophos one, so it will check all shortcut (LNK) files before allowing them to run, what’s even nicer is that this tool is free, and you can download it from here.

Please note though that this tool does not protect you from LNK files or targets stored on the local disk or PIF based exploits.

There’s also a video of the tool in action, which you can find on YouTube here.