Didier Stevens

Wednesday 18 August 2010

Quickpost: .LNK Template Update

Filed under: My Software,Quickpost,Vulnerabilities — Didier Stevens @ 10:43

I updated my .LNK template with info I got from comments from WndSks and Forrest Gump. This new version identifies well-known Shell GUIDs:


Quickpost info


4 Comments »

  1. template for what program?

    Comment by Andro — Wednesday 18 August 2010 @ 10:54

  2. @Andro 010 Editor, read the previous post I linked too.

    Comment by Didier Stevens — Wednesday 18 August 2010 @ 22:04

  3. I’m getting the following error when I run the new LNK template:
    Executing template ‘C:10 Templates\LNKTemplate.bt’ on ‘C:\Letter.lnk’…
    *ERROR Line 342: Template passed end of file at variable ‘BlockData’.

    Is it just me?

    Comment by Jeff Murri @infosec208 — Wednesday 18 August 2010 @ 23:08

  4. Jeff Murri @infosec208 Can you share Letter.lnk?

    Comment by Didier Stevens — Thursday 19 August 2010 @ 8:33


RSS feed for comments on this post. TrackBack URI

Leave a Reply (comments are moderated)

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

The Rubric Theme. Blog at WordPress.com.

Follow

Get every new post delivered to your Inbox.

Join 227 other followers

%d bloggers like this: