Signature Detail

SMTP: .MDB

This signature detects e-mail attachments that have the extension .mdb and were sent through SMTP. Because .MDBs (MS Access Application) files can contain scripts, this can indicate an incoming e-mail virus. Attackers can create malicious scripts, tricking users into executing the file and infecting the system.

Extended Description

The impact on the target system is dependent on the instructions contained in the malicious .mdb file, and the actions of the user who encounters it in their e-mail.

References

• URL: http://www.cknow.com/vtutor/FileExtensions.html
• URL: http://www.novatone.net/mag/mailsec.htm
• URL: http://support.microsoft.com/?kbid=235309