Signature Detail
Short Name |
SMTP:EXT:DOT-WSH |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
SMTP |
Keywords |
.wsh e-mail attachment |
Release Date |
2004/08/04 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMTP: .WSH
This signature detects e-mail attachments with the extension .wsh sent through SMTP. This can indicate an incoming e-mail virus. .WSHs (Windows Script Host Settings File) contain configuration parameters. Attackers can create malicious configurations, tricking the user into executing the file and infecting the system.
Extended Description
Malware writers can set undesired system values.
References