SMTP: .SCR
This signature detects e-mail attachments with the extension ".scr" sent through SMTP. This can indicate an incoming e-mail virus. SCRs (ScreenSaver files) are renamed ".exe" files containing executable code. Attackers can disguise malicious executables to appear as harmless screensaver files, tricking the user into executing the file and infecting the system.
Extended Description
The impact on the target system is dependent on the instructions contained in the malicious .scr file.
Short Name
SMTP:EXT:DOT-SCR
Severity
Minor
Recommended
False
Recommended Action
None
Category
SMTP
Keywords
.SCR
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown