| GEN:SID | 1:2166 |
| Message | VIRUS OUTBOUND .bat file attachment |
| Summary | This event is generated when a possible outgoing virus is detected.
|
| Impact | Informational event. An virus on an infected host may be attempting to propogate.
|
| Detailed Information | This event indicates that an outgoing email message possibly containing a virus has been detected.
This rule generates an event when a filename extension commonly used by viruses is detected.
|
| Affected Systems | Any host.
|
| Attack Scenarios | This is indicative of a virus infection.
|
| Ease of Attack | Simple.
|
| Corrective Action | Check the host for signs of virus infection.
|
| Additional References | |