POP3: .WSF
This signature detects e-mail attachments with the extension .wsf received through POP3. This can indicate an incoming e-mail virus. .WSFs (Windows Script File) contain scripts. Attackers can create malicious scripts, tricking the user into executing the file and infecting the system.
Extended Description
This signature detects .wsf files arriving via email attachments. Files with .wsf extensions may be exploited by viruses and worms to compromise target systems. The impact on the target system is dependent on the instructions contained in the malicious .wsf file.
Short Name
POP3:EXT:DOT-WSF
Severity
Major
Recommended
False
Recommended Action
Drop
Category
POP3
Keywords
.WSF
Release Date
07/28/2004
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown