POP3: .JS

This signature detects e-mail attachments that have the extension .ss and were received through POP3. Because .JSs (JavaScript File) files contain scripts, this can indicate an incoming e-mail virus. Attackers can create malicious scripts, tricking users into executing the file and infecting the system.

Extended Description

Malware writers often exploit JScript script files by inserting malicious code. A target system is compromised if an unsuspecting user opens a malicious .js file, which usually arrives by e-mail. The impact on the target system is dependent on the instructions contained in the malicious .js file.

References

URL: http://www.cknow.com/vtutor/FileExtensions.html http://www.novatone.net/mag/mailsec.htm http://support.microsoft.com/?kbid=235309

Short Name

POP3:EXT:DOT-JS

Severity

Major

Recommended

False

Recommended Action

Drop

POP3: .JS

Extended Description

References

Found a potential security threat?