Didier Stevens

Wednesday 18 August 2010

Quickpost: .LNK Template Update

Filed under: My Software,Quickpost,Vulnerabilities — Didier Stevens @ 10:43

I updated my .LNK template with info I got from comments from WndSks and Forrest Gump. This new version identifies well-known Shell GUIDs:

Quickpost info

4 Comments »

  1. template for what program?

    Comment by Andro — Wednesday 18 August 2010 @ 10:54

  2. @Andro 010 Editor, read the previous post I linked too.

    Comment by Didier Stevens — Wednesday 18 August 2010 @ 22:04

  3. I’m getting the following error when I run the new LNK template:
    Executing template ‘C:10 Templates\LNKTemplate.bt’ on ‘C:\Letter.lnk’…
    *ERROR Line 342: Template passed end of file at variable ‘BlockData’.

    Is it just me?

    Comment by Jeff Murri @infosec208 — Wednesday 18 August 2010 @ 23:08

  4. Jeff Murri @infosec208 Can you share Letter.lnk?

    Comment by Didier Stevens — Thursday 19 August 2010 @ 8:33


RSS feed for comments on this post. TrackBack URI

Leave a Reply (comments are moderated)

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Blog at WordPress.com.