POP3: .386
This signature detects e-mail attachments that have the extension .386 and were received through POP3. Because .386s ( Windows Enhanced Mode Driver) files contain executable code, this can indicate an incoming e-mail virus. Attackers can create malicious executables, tricking users into executing the file and infecting the system.
Extended Description
The impact on the target system is dependent on the instructions contained in the malicious .386 file.
References
Short Name
POP3:EXT:DOT-386
Severity
Minor
Recommended
False
Recommended Action
None
Category
POP3
Keywords
.386
Release Date
08/04/2004
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown