CloneRanger
August 11th, 2010, 06:28 PM
I know the MS patch is out, and there are other fixes, but this still could prove of use, if only for testing etc.
-{ Quote: "A tool to detect all viruses taking advantage of .lnk vulnerability
We have developed this tool to detect all kinds of viruses exploiting .lnk vulnerability. Computer users can download and scan with the tool to check if their computers are infected with the viruses.
http://blog.bkis.com/en/a-tool-to-detect-all-viruses-taking-advantage-of-lnk-vulnerability/" }-
220850
220851
It uploads a small file
220853
220852
Correctly detected these -
Bkav detect .lnk shortcut file virus tool
Scan start at 11/08/2010 19:14
Found file virus in shortcut c:\System Volume Information\_restore{removed}\RP59\A0046199.lnk, linked to C:\dll.dll.
Found file virus in shortcut c:\System Volume Information\_restore{removed}\RP59\A0048369.lnk, linked to C:\dll.dll.
Found file virus in shortcut c:\Documents and Settings\ \Desktop\ \Lnk-Cpl Exploit\Copy of suckme.lnk.lnk, linked to C:\dll.dll.
Found file virus in shortcut c:\Documents and Settings\ \Desktop\ \Lnk-Cpl Exploit\suckme_.lnk, linked to C:\dll.dll.
Scan finish at 11/08/2010 19:14
Nice :thumb:
-{ Quote: "A tool to detect all viruses taking advantage of .lnk vulnerability
We have developed this tool to detect all kinds of viruses exploiting .lnk vulnerability. Computer users can download and scan with the tool to check if their computers are infected with the viruses.
http://blog.bkis.com/en/a-tool-to-detect-all-viruses-taking-advantage-of-lnk-vulnerability/" }-
220850
220851
It uploads a small file
220853
220852
Correctly detected these -
Bkav detect .lnk shortcut file virus tool
Scan start at 11/08/2010 19:14
Found file virus in shortcut c:\System Volume Information\_restore{removed}\RP59\A0046199.lnk, linked to C:\dll.dll.
Found file virus in shortcut c:\System Volume Information\_restore{removed}\RP59\A0048369.lnk, linked to C:\dll.dll.
Found file virus in shortcut c:\Documents and Settings\ \Desktop\ \Lnk-Cpl Exploit\Copy of suckme.lnk.lnk, linked to C:\dll.dll.
Found file virus in shortcut c:\Documents and Settings\ \Desktop\ \Lnk-Cpl Exploit\suckme_.lnk, linked to C:\dll.dll.
Scan finish at 11/08/2010 19:14
Nice :thumb: