The missing LNK

2010-09-01

Peter Ferrie

Microsoft, USA

Editor: Helen Martin

Abstract

LNK files are everywhere in Windows, so ubiquitous that they are rarely even recognized for what they are. Overall, LNK files do not pose a direct threat, but then there are the LNK files produced by W32/Stuxnet, which allow the execution of arbitrary code without the need for any user interaction. Peter Ferrie has the details.

The full article is available to registered users. Click here for free registration or, if you already are a registered user, login to access the full article.

Magazine


	September 2010 PDF Please register to download the PDF Comment Breaking the habit News ISP in hot water with ICO RAP rap? Malware prevalence report July 2010 Malware analyses The missing LNK Injection as a way of life Chim Chymine: a lucky sweep? Technical feature Anti-unpacker tricks – part twelve Feature What’s the deal with sender authentication? Part 4 Comparative review VBSpam comparative review September 2010 Calendar Anti-malware industry events See also Virus Bulletin archives How to become a subscriber Reprints