http://www.stiller.com/shs.htm explains what it is and can do. FWIW you could add this extention into the virus.cfg file of declude or simply set to catch via the rules.ima.
~Rick > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] > Sent: Wednesday, December 11, 2002 9:47 AM - FamHost > To: [EMAIL PROTECTED] > Subject: [Declude.Virus] Banned SHS extension? > > > I'm getting a boatload of xmascottage.shs , christmas.shs types > of files. > These are banned extensions, but not detected by F-prot. I'm > very suspicious > of these - any other experiences? > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. ___________________________________________________________________ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. ___________________________________________________________________ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.