Signature Detail

POP3: .JS

This signature detects e-mail attachments that have the extension .ss and were received through POP3. Because .JSs (JavaScript File) files contain scripts, this can indicate an incoming e-mail virus. Attackers can create malicious scripts, tricking users into executing the file and infecting the system.

Extended Description

Malware writers often exploit JScript script files by inserting malicious code. A target system is compromised if an unsuspecting user opens a malicious .js file, which usually arrives by e-mail. The impact on the target system is dependent on the instructions contained in the malicious .js file.

References

• URL: http://www.cknow.com/vtutor/FileExtensions.html
• URL: http://www.novatone.net/mag/mailsec.htm
• URL: http://support.microsoft.com/?kbid=235309