Microsoft is arming Windows users with a new automated tool to help thwart exploits of a zero-day that has come under attack.
The bug, which lies in the Windows shell component of the operating system, exists because Windows parses shortcuts in a way that permits malicious code to be executed when the icon of a shortcut is displayed.
For more information see link below:
http://www.eweek.com/c/a/Security/Microsoft-Releases-Windows-Security-Tool-to-Swat-Bug-315780/