.scr Trojan files.

Hello, im very curious about how these works. Im not sure is this nothing about programming, so some of you may be know the steam scam that a guy gives u a fake link to a "photo"
ex. www.photos034004.com/NAME.jpg, it immediately starts loading a file .scr.
I know thats something about screenshots, but how does that work and how people to those to get other's information?

 

Ok,

So .scr files are usually "screen shots," which usually (and almost by default) are stored in the main Windows directory. In most cases, it means that a .scr file can execute other types of programs of the Windows platform (media player, power point, etc...) when opened by your machine.

The "hack" is usually done by sending a link, which, in return causes a program to open and to execute that file.

The "problem" is that .scr files are easily programmable (that it can cause your computer to open certain programs).

The "situation" is that when you open that photo, or go to that link, you already have a browser open. When you download the file, and execute the file (by opening it), your system opens the default viewing program.

The "other situation" is that once you view the image (in the default program), it triggers another execution (in your web browser) to do essentially what ever it wants (because you authorized it to by viewing the image).

The "reason" is because when you allow the default program to view the image, you also allow your web browser to execute from a trusted program's response.