Antivirus programs are pretty much a joke. If anything gets through they can't even really clean your machine because things hide in the system restore folders. The only real defense is to have an image of your hard drive backed up that you can reload if problems happen. Do I have such an image? Of course not. ----- Original Message ----- From: "Steven Clark" <kcpadfoot@xxxxxxxxx> To: <real-eyes@xxxxxxxxxxxxx> Sent: Wednesday, July 28, 2010 4:51 PM Subject: [real-eyes] Windows Shortcut Exploit Protection Tool The following important info is from Sophos http://www.sophos.com/products/free-tools/sophos-windows-shortcut-exploit-protection-tool.html Windows Shortcut Exploit Protection Tool Windows Shortcut Exploit Protection Tool Download now Block the Windows Shortcut Exploit Detects the Windows Shortcut Exploit Blocks exploit from running Works with your existing anti-virus Block the Windows Shortcut Exploit The Windows Shortcut Exploit is a zero-day vulnerability in all versions of Windows that allows a Windows shortcut link to run a malicious DLL file. Our free, easy-to-use tool blocks this exploit from running on your computer. First, check your computer Before downloading this free tool, first scan your computer with your existing anti-virus to check for and remove malware that may be present. Stay protected from the exploit After you have scanned your computer, download and install our Windows Shortcut Exploit Protection Tool. Our tool will notify you if you happen to browse to an exploited link and it will block the exploit from running. Here is the link to download the tool http://downloads.sophos.com/custom-tools/Sophos%20Windows%20Shortcut%20Exploit%20Protection%20Tool.msi I learned about this today while listening to the live broadcast of Security Now www.grc.com/sn It is unknown when Microsoft will be able to release a fix for this exploit. Sophos made this free tool that will protect you from being attacked. Your current anti virus or malware software won't protect you. Steve Gibson, the host of the Security Now podcast said there are already worms out on the net that use this exploit. Security Now is recorded live on Wednesday around 1:00 pm and can be listened to by going to live.twit.tv with your browser or you can listen in winamp by pasting this address into winamp, press control l to open the location box then copy and paste the following: http://twit.am/listen.m3u Then simply press enter. There are other shows from twit.tv that are recorded live and rebroadcast during the week. Steve To subscribe or to leave the list, or to set other subscription options, go to www.freelists.org/list/real-eyes To subscribe or to leave the list, or to set other subscription options, go to www.freelists.org/list/real-eyes