


Originally posted by Azza ☠:The SCR (screensaver) file can be exploited into running EXE (executable) code. Currently, ignore any anti-virus download/purchase, and just use trusted anti-virus software.

Google’s Image Search bots eventually will index this bogus content. It was being exploited to display fake virus warnings, in an attempt to use scareware tatics to download and purchase a fake anti-virus product. On 11th May 2018 - For several weeks, some readers have complained that clicking on Google Images search results directed them to Web pages that pushed rogue anti-virus scareware via misleading security alerts and warnings. Even the FBI uses this exploit for example injecting a child porn image as bait to see where it goes and who it is shared among. Most of the time this is quite harmless these days, commonly just used as a tracker or watermark code. If you are using an old photo viewer, for example, which still has an exploit available in it. Virus coding can also be stored in images to exploit the viewer. Hense you get a heads up warning and would have to download it manually to your PC, then attempt to run it, in order for it to take any effect. These days it will just bring up a prompt to download that image file, with the SCR extention rather than running it. Having an up-to-date Web-browser will prevent this autorun from occuring. Hense a malicious person can fake it as an image to display, the web-browser opens it to display and runs code instead, which could place that EXE under your Windows startup to launch each time, etc. The SCR (screensaver) file can be exploited into running EXE (executable) code.
