Microsoft has posted both a software and a manual fix/workaround that will help mitigate the .lnk and .pif file vulnerability on their Support page. This vulnerability can allow a someone remote access to your Windows machine from Windows XP all the way up through Windows 7. Use either of the workarounds until Microsoft issues an official patch. If you are not comfortable with editing the Windows Registry manually, I suggest using the software utility provided on the Support page.
For those that haven’t heard about it, Windows incorrectly handles (parses) shortcuts in a way that malicious code may be executed when the icon of a specially crafted (read: Malicious) shortcut is displayed.
Microsoft TechNet Advisory:
http://www.microsoft.com/technet/security/advisory/2286198.mspx
Microsoft Support Page for KB2286198:
http://support.microsoft.com/kb/2286198#LetMeFixItMyself
Joe
[...] This post was mentioned on Twitter by Big Kahuna, CyberCrime101. CyberCrime101 said: New blog post Re: Windows .lnk file vulnerability workarounds: http://is.gd/dDmPJ [...]