Microsoft plans to release a patch on Monday for an emergency fix a flaw involving incorrectly parsing shortcuts in a way that allows malicious code to be executed when the icon of a specially crafted shortcut is displayed.

As with many new attack techniques, copycat attackers have used .lnk files to exploit the vulnerability. The one family of viruses that used this techniques called Sality.AT and Sality.AT, according to Microsoft Malware Protection Center.

“Although there have been multiple families that have picked up this vector, one in particular caught our attention this week–a family named Sality, and specifically Sality.AT”

According to Microsoft Security Advisories, the affected versions of Windows include Windows 7, XP, Server 2003, Vista and Server 2008.