It has been used for virii in the past. See http://www.pchell.com/virus/stagesworm.shtml
Dan John Tolmachoff wrote:http://www.pchell.com/virus/stagesworm.shtml > Found it: > > http://whatis.techtarget.com/fileFormatA/0,289933,sid9,00.html > > SHS Shell scrap file; reportedly used to send "password stealers" > > I am going to add this to my banned extension list. > > John Tolmachoff --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
