SMTP: .SHS

This signature detects e-mail attachments with the extension ".shs" sent through SMTP. This can indicate an incoming e-mail virus. SHSs (Microsoft Windows Scrap files) are created when text or graphics are dragged and dropped between Microsoft Office applications. Attackers can disguise malicious executables to appear as harmless scrap files, tricking the user into executing the file and infecting the system.

Extended Description

The impact on the target system is dependent on the instructions contained in the malicious .shs file.

References

URL: http://www.helpdesk.umd.edu/virus/security/removeshs.shtml http://www.stiller.com/shs.htm http://www.cknow.com/vtutor/FileExtensions.html

Short Name

SMTP:EXT:DOT-SHS

Severity

Minor

Recommended

False

Recommended Action

None

SMTP: .SHS

Extended Description

References

Found a potential security threat?