SMTP: .INS

This signature detects e-mail attachments that have the extension .ins and were sent through SMTP. Because .INSs (Internet Naming Service) files contain configuration parameters, this can indicate an incoming e-mail virus. Attackers can include malicious configurations, tricking users into executing the file and infecting the system.

Extended Description

The impact on the target system is dependent on the instructions contained in the malicious .ins file.

References

URL: http://www.novatone.net/mag/mailsec.htm http://support.microsoft.com/?kbid=235309 http://www.cknow.com/vtutor/FileExtensions.html

Short Name

SMTP:EXT:DOT-INS

Severity

Minor

Recommended

False

Recommended Action

None

SMTP: .INS

Extended Description

References

Found a potential security threat?