VIRUS: POP3 .SHS
This signature detects e-mail attachments with the extension ".shs" sent through POP3. This can indicate an incoming e-mail virus. Microsoft Windows Scrap files (SHSs) are created when text or graphics are dragged and dropped between Microsoft Office applications. Attackers can disguise malicious executables to appear as harmless scrap files, tricking the user into executing the file and infecting the system.
Extended Description
An .shs file may contain malicious content.
Short Name
POP3:EXT:DOT-SHS
Severity
Major
Recommended
False
Recommended Action
Drop
Category
POP3
Keywords
.SHS POP3
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown