Signature Detail

SMTP: Double Extension

This anomaly triggers when it detects an e-mail attachment that contains two file extensions. Attackers or viruses can send e-mail attachments that use two file extensions to disguise the actual file name and trick users into opening a malicious attachment.

References

• URL: http://www.cknow.com/vtutor/FileExtensions.html
• URL: http://antivirus.about.com/library/blext.htm