Today, I will be reviewing one of the most important tool for you. You can call this tool as Sophos Windows Shortcut Exploit Protection tool. This tool will help you to get rid of a zero-day vulnerability which is known as ‘Windows Shortcut Exploit’ or you can also call it as CPLINK, has been found in all the version of Windows, specially in the versions of Windows developed later than Windows XP SP 3. Till today, Microsoft has not developed or release any patch for this Exploit but till that time you can use this tool, to keep your system safe and sound.
This vulnerability allows the Windows shortcut Link i.e. a .lnk file to run a malicious DLL file. This dangerous shortcut link can be attached with any document or it can be hidden in any file but this tool will stop this exploit by blocking its execution. This exploit will work when you open a device, a webDav point or a network share which has been already infected, it will be executed even if you have disabled the option of Autoplay or Autorun.
As this tool has been designed only for blocking the exploit, so once it has been installed you cannot make any amendments with the tool (as it is not even required). You can see the directory where this tool gets installed (at the time of installation), you will find that only a small DLL file will be present inside the directory and its size is 200Kb. Thus it is presumed that this file will help you to patch up the vulnerability and prevent your system against the threats.
The size of this tool is around 3 Mbs and it will not take much time to get installed. After getting installed you can see the Log file, which will enumerate the changes made by this tool in your system in order to stop the exploit from getting executed. The log window will be similar as shown above in the snapshot. As this tool has been designed to remove the vulnerability from all the versions of Windows, so this freeware is compatible with all the versions of Windows as it has been checked with Windows 7 32-bit Ultimate edition. So, by the time Microsoft releases it patch you can use this tool and thus can make your system threat free.