VIRUS: POP3 .SCR

This signature detects e-mail attachments with the extension ".scr" sent through POP3. This can indicate an incoming e-mail virus. ScreenSaver files (SCRs) are renamed ".exe" files containing executable code. Attackers can disguise malicious executables to appear as harmless screensaver files, tricking the user into executing the file and infecting the system.

Extended Description

An .src file can contain malicious code.

Short Name
POP3:EXT:DOT-SCR
Severity
Major
Recommended
False
Recommended Action
Drop
Category
POP3
Keywords
.SCR POP3
Release Date
04/22/2003
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3375
False Positive
Unknown

Found a potential security threat?