Windows 'shortcut' attack code goes public