[Vuln]

This project is no longer maintained - download link removed

Spoov is a program that can build shell links (Windows file shortcuts) with embedded scripts. It offers some features that are not available through the "Create Shortcut Wizard".



A default template in action (FUD download & execute)
Spoiler (Click to View)

Custom template creator
Spoiler (Click to View)

Features
- 2 default templates: download & execute + execute local file
- Create custom templates
- Bypass SmartScreen
- Set a custom shell mouse hover tooltip
- Hide command-line arguments
- File extension spoofer
- Update checker (notification only, no automatic downloading)

Execute local file
- Works on all Windows versions.
- No errors if the file doesn't exist
- Copies target file into Windows Temp folder before executing
- Can execute any file type.
- Executable file types can have non-executable file extensions.

Download & Execute
- Works on Windows 7/8/8.1/10, and also on Windows XP if the SP 2 Support Tools have been installed.
- Can download & execute any file type.
- Executable file types can have non-executable file extensions.
- If no internet connection is available or another problem occurs, it will keep silently retrying for the next 14 days.

Default template drawbacks
- If someone removes the shortcut's read-only file attribute, it will no longer work. This also means that it would be recommended to archive the shortcut prior to uploading/sharing it.
- When using the download&execute template, a command prompt window will briefly flash.

Builder dependencies
.NET Framework 4.0

[danielribero07]

heard mediafire distributes isn't it a bad idea to upload it there? just curious, but thanks for the write up and content. looks good i'll check it out

[Vuln]

heard mediafire distributes isn't it a bad idea to upload it there? just curious, but thanks for the write up and content. looks good i'll check it out

MediaFire does indeed scan and distribute all files, but I don't mind, it's only the builder, and it's not going to affect the generated shortcuts. But I don't care about the shortcuts being distributed either, their simplicity makes detections unlikely.

The generated downloaders I scanned on VT a few years ago are still FUD today. Well, except for 1 weird TrendMicro heuristic detection, but I could probably get rid of that by contacting TrendMicro. Also, I'm guessing that it's only detected by VT's version of TrendMicro, and not even by the public commercial and free version. But I need someone to confirm that.

So, have you tried it yet? Any remarks or suggestions?

I'm thinking about doing a project overhaul, so that users can also choose to embed their own batch scripts. And I also want to get rid of the current shitty GUI.

[Will Grigg]

Can you send this to me would love to try it out.

[Vuln]

Can you send this to me would love to try it out.

There's a download link at the bottom of the OP. Big yellow text.

[FRIΞDBAO™]

There are alot of shorcut builder and compiler and this one works the best thx!

[Welshdroo]

Looks good OP ... Thank you , Going try it out :D

Can you send this to me would love to try it out.

Link in Post, Didn't you not see it?

Download link
http://www.mediafire.com/download/gbc4xx...v_v1.0.zip

[RobinVJ]

Pm me with the details OP. Thanks btw

[Vuln]

In a few days I will be releasing a new version. It will have more options and a pretty GUI. If anyone wants me to add a specific feature, please do let me know.

There are alot of shorcut builder and compiler and this one works the best thx!

Thank you, although I've only seen 1 other shortcut builder on HF, and it was meh.

Looks good OP ... Thank you , Going try it out :D

Let me know how it goes!

Link in Post, Didn't you not see it?

I guess the big yellow text wasn't big and yellow enough...

[FreginFantasmic]

This is very good tool, will be trying it out soon.

[BluWave]

Looks good. Keep up the hard work.

[Kisame]

AVG detected it as malware..?

[Vuln]

Looks good. Keep up the hard work.

Thank you, I will.

AVG detected it as malware..?

I really need more info. What kind of detection was it? And what was detected? The builder, the generated shortcuts, or a file with a spoofed extension? And was it a scantime or runtime detection?

I just generated a shortcut downloader, and it's still (scantime) undetected by AVG. Maybe you entered a detected string, like a flagged domain or file name. Or perhaps you used a detected icon.

If you can't figure it out, please post a screenshot of your current input and settings.

[Elitas]

This tool looks really cool. 🤝

[Don Genovese]

Looks very nice. Will be trying this out soon. Good luck with future development.