SMTP: .OCX

This signature detects e-mail attachments that have the extension .ocx and were sent through SMTP. Because .OCXs (Object Control Extension) files can contain multiple scripts, this can indicate an incoming e-mail virus. Attackers can create malicious executables, tricking users into executing the file and infecting the system.

Extended Description

E-mail messages having attachments with .ocx extensions could indicate a virus attempting to propagate.

References

URL: http://www.cknow.com/vtutor/FileExtensions.html http://support.microsoft.com/?kbid=235309 http://www.novatone.net/mag/mailsec.htm

Short Name

SMTP:EXT:DOT-OCX

Severity

Minor

Recommended

False

Recommended Action

None

SMTP: .OCX

Extended Description

References

Found a potential security threat?