Hello Mike,

The following snippet is from http://computercurrents.com/newstoday/99/11/01/news2.html

------
Daily News
Microsoft Scrap File Trojan
By Steve Gold, Newsbytes.
November 01, 1999

Finjan has issued a customer warning over a new form of Trojan Horse attack that 
attacks Microsoft [NASDAQ:MSFT] scrap *(.SHS) *files. The information technology (IT) 
security firm says that the malicious code problem can be used easily to create and 
deliver Trojan executable attacks.

Finjan says that this worries the company sine it is yet another way that anyone can 
create Trojan attacks on Windows users with ease. The firm advises all customers to 
take proper precautions to educate and protect their computer systems and employees.

The problem, Finjan says, is that Microsoft Office applications can be used to create 
"scrap" files that hide executable programs or other content.

Finjan says that Windows always hides the SHS file extension, so a different file 
extension can be used (e.g., JPEG, GIF, TXT, etc.) to make a program appear to be a 
harmless file type.

This, the company says, gives a person with malicious intent the ability to create 
Trojan executable programs that the majority of people will open without hesitation.

When distributed via e-mail messages, instant message file transfers or other 
Web-based mediums, Finjan says that a scrap file's SHS extension becomes visible. But 
once saved to the hard disk, the SHS extension will disappear again.

(...)
-----

I'm afraid you have a virus...

On 17-Jun-00, Mike wrote:
M> 
M>> The male and female stages of life. Bye.
M> 
M> -- Binary/unsupported file stripped by Listar --
M> -- Type: application/octet-stream
M> -- File: LIFE_STAGES.TXT.SHS
M> 
M> 
Regards
-- 
Ron Jensen
http://www.jentronics.com/

----------------------------------------------------
Reach me by ICQ. My ICQ# is 27335627
----------------------------------------------------

-- 

To unsubscribe send "unsubscribe miami-talk-ml" to
"[EMAIL PROTECTED]". For help on list commands send "help" to
"[EMAIL PROTECTED]".


Reply via email to