Encyclopedia entry
Updated:
Apr 17, 2011
| Published:
Jul 20, 2010
Aliases
Alert Level
(?)
Severe
Antimalware protection details
Microsoft recommends that you download the
latest definitions
to get protected.
Detection initially created:
Definition: 1.87.193.0
Released: Jul 20, 2010
|
Summary
Exploit:Win32/CplLnk.B is a generic detection for specially-crafted, malicious shortcut files that exploit the vulnerability that is described by
CVE-2010-2568.
When a user browses a folder that contains the malicious shortcut using an application that displays shortcut icons, the malware runs instead. An example of an application that displays shortcut icons is Windows Explorer. No further user interaction is required, in most cases.
Symptoms
There are no common symptoms associated with this threat. Alert notifications from installed antivirus software may be the only symptom(s).
Technical Information (Analysis)
Exploit:Win32/CplLnk.B is a generic detection for specially-crafted, malicious shortcut files that exploit the vulnerability that is described by
CVE-2010-2568.
Exploit:Win32/CplLnk.B is a minor variation of
Exploit:Win32/CplLnk.A.
When a user browses a folder that contains the malicious shortcut using an application that displays shortcut icons, the malware runs instead. An example of an application that displays shortcut icons is Windows Explorer. No further user interaction is required, in most cases.
Successful exploitation results in the malware running with the privileges of the logged-on user.
Additional Information
Analysis by Peter Ferrie
Prevention
Recovery
Additional recovery instructions
This threat exploits a vulnerability discussed in
Microsoft Security Bulletin MS10-046. Make sure that you install the updates available from Microsoft so that your software is no longer affected by the vulnerability.
