Signature Detail
Short Name |
POP3:EXT:DOT-SCR |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
POP3 |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
VIRUS: POP3 .SCR
This signature detects e-mail attachments with the extension ".scr" sent through POP3. This can indicate an incoming e-mail virus. ScreenSaver files (SCRs) are renamed ".exe" files containing executable code. Attackers can disguise malicious executables to appear as harmless screensaver files, tricking the user into executing the file and infecting the system.
Extended Description
An .src file can contain malicious code.
References