LinkIconShim

LinkIconShim is a basic shell extension that inserts itself in front of the original buggy lnk file handler and checks the incoming files.

If a link to control panel item is found (the exploitable one), the path to the cpl is checked, and only icons from cpl applets located in system directory are extracted.

This is very similar to method used in official Microsoft patch released for supported systems. Otherwise default 'blocked' icon is returned instead of trying to extract one by running arbitrary dll.