Viral eMail Attachments

1
Viral e-Mail Attachments

• The File Extension Determines Which Program
  Executes A File
• Windows Hides File Extensions From Users By
  Default
• Visual Basic Encoded (.vbe) Commands And Visual
  Basic Scripts (.vbs) Can Do Anything On A
  Windows Computer

2
Viral e-Mail Attachments

• Hackers Spoof The Extension
• The Files hello.txt, hello.txt.vbe and
  hello.txt.vbs Are All Displayed As hello Or
  hello.txt
• Notepad Opens The First File
• Wscript.exe Executes The Second Two
• AnnaKournikova.jpg.vbs e-Mail Attachment

3
Protect Yourself

• Display All File Extensions

4
(No Transcript)
5
(No Transcript)
6
(No Transcript)
7
Protect Yourself

• Change The Program That Is Associated With .vbe
  And .vbs Files
• There Is No Legitimate Use For These Files

8
(No Transcript)
9
(No Transcript)
10
(No Transcript)
11
(No Transcript)
12
(No Transcript)
13

• Now Take The Same Steps For The .vbs Extensions

14
(No Transcript)
15
(No Transcript)
16
(No Transcript)
17
(No Transcript)
18
(No Transcript)
19
Viral e-Mail Attachments

• Scrap Files Are Archaic Windows Executables That
  Utilize A Dynamic Link Library (.dll)
• Hackers Embed Them In e-Mail And e-Mail
  Attachments

20
Protect Yourself

• Rename The Shscrap.dll File That Executes Scrap
  Files
• There Is No Legitimate Use For These Files

21
RenameC\Windows\System\Shscrap.dll