Categorized | Security

Microsoft released workaround to fix CVE-2010-2568

Reference: http://support.microsoft.com/kb/2286198

To implement the workaround that disables .LNK and .PIF file functionality automatically on a computer that is running Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, or Windows Server R2.

Enable workaround Fix It

If want to undo the workaround, click on disable workaround Fix It

Or you can apply yourself by doing some changes on registry.

Enable Changes:

1. Click Start, click Run, type regedit in the Open box, and then click OK.

2. Locate and then select the following registry key:
HKEY_CLASSES_ROOT\lnkfile\shellex\IconHandler

3. Click the File menu and then click Export.

4. In the Export Registry File dialog box, type LNK_Icon_Backup.reg and then click Save.

Note This will create a backup of this registry key in the My Documents folder by default .

5. Select the value (Default) on the right pane in the Registy Editor. Press ENTER to edit the value of the key. Delete the value, so that the value is blank, and press ENTER.

6. Locate and then select the following registry key:
HKEY_CLASSES_ROOT\piffile\shellex\IconHandler

7. Click the File menu and then click Export.

8. In the Export Registry File dialog box, type PIF_Icon_Backup.reg and then click Save.

Note This will create a backup of this registry key in the My Documents folder by default

9. Select the value (Default) on the right pane in the Registy Editor. Press ENTER to edit the value of the key. Delete the value, so that the value is blank, and press ENTER.

Disable Changes:

How to undo the interactive method

1. Click Start, click Run, type regedit in the Open box, and then click OK.

2. On the File menu, click Import.

3. In the Import Registry File dialog box, select LNK_Icon_Backup.reg, and then click Open.

4. On the File menu, click Import.

5. In the Import Registry File dialog box, select PIF_Icon_Backup.reg, and then click Open.

6. Exit Registry Editor, and then restart the computer.

How to manually reset the Registry key values to the default values

1. Click Start, click Run, type regedit in the Open box, and then click OK.

2. Locate and then click the following registry key:
HKEY_CLASSES_ROOT\lnkfile\shellex\IconHandler

3. Reset the registry key value to:
{00021401-0000-0000-C000-000000000046}

4. Locate and then click the following registry key:
HKEY_CLASSES_ROOT\piffile\shellex\IconHandler

5. Reset the registry key value to:
{00021401-0000-0000-C000-000000000046}

6. Restart the computer

View full post on Web Security Weblog

Related Posts

Comments are closed.

Security Status

Beware Facebook "Timeline" scams http://t.co/W5EW0cVv
5 months ago
Nigerian government (unknowingly) hosts phishing website http://t.co/uQd42ENw
5 months ago
PCMag Awards McAfee All Access its Editors’ Choice: SANTA CLARA, Calif.--(BUSINESS WIRE)--McAfee today announced... http://t.co/FakV7Vd8
5 months ago
RT @mikko: I hadn't noticed Google Maps has added 3D models of buildings. Here's a (very accurate) view of F-Secure HQ in Helsinki http://t.co/IKfAZlak
5 months ago
North Koreans aren't known for their online presence. But others may be lured into clicking Kim Jong-Il 'videos' too http://t.co/yQOon6YT
5 months ago
How to Protect Your Professional Reputation on Facebook Timeline http://t.co/I4bcR2VN
5 months ago
This is pretty impressive from @Softpedia: Facebook scans 2 trillion link clicks and blocks 220 million posts each day http://t.co/vKsn9gNl
5 months ago
Need for integrated approach to security in industrial control systems - http://t.co/tPBCNOow with @PikeResearch
5 months ago
Some free-based music we play at work http://t.co/xu5agZfc
5 months ago
Japan’s cyber defense weapon: a virus. It includes quotes by @Luis_Corrons via @InfosecurityMag
5 months ago