搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

Delete emails with dangerous attachments

  • 3 个回答
  • 1 人有此问题
  • 3 次查看
  • 最后回复者为 sfhowes

more options

I am getting dozens of emails every day which includes attachments like .ISO, .CAB, .DLL and so on. I have searched the Internet and tried everything to work out a way to delete these messages as soon as they are downloaded.

I am okay to keep deleting them myself but I worry about my office girls inadvertently trying to open the attachment and installing malicious software.

Over many weeks I have spent days looking for options to protect myself from a swathe of emails with dangerous attachments but I cannot find anything. Does anyone have any ideas please ?

These are the sort of attachments we are getting .ADE, .ADP, .APK, .BAT, .CHM, .CMD, .COM, .CPL, .DLL, .DMG, .EXE, .HTA, .INS, .ISP, .JAR, .JS, .JSE, .LIB, .LNK, .MDE, .MSC, .MSI, .MSP, .MST, .NSH .PIF, .SCR, .SCT, .SHB, .SYS, .VB, .VBE, .VBS, .VXD, .WSC, .WSF, .WSH, .CAB

I am getting dozens of emails every day which includes attachments like .ISO, .CAB, .DLL and so on. I have searched the Internet and tried everything to work out a way to delete these messages as soon as they are downloaded. I am okay to keep deleting them myself but I worry about my office girls inadvertently trying to open the attachment and installing malicious software. Over many weeks I have spent days looking for options to protect myself from a swathe of emails with dangerous attachments but I cannot find anything. Does anyone have any ideas please ? These are the sort of attachments we are getting .ADE, .ADP, .APK, .BAT, .CHM, .CMD, .COM, .CPL, .DLL, .DMG, .EXE, .HTA, .INS, .ISP, .JAR, .JS, .JSE, .LIB, .LNK, .MDE, .MSC, .MSI, .MSP, .MST, .NSH .PIF, .SCR, .SCT, .SHB, .SYS, .VB, .VBE, .VBS, .VXD, .WSC, .WSF, .WSH, .CAB

所有回复 (3)

more options

You could create a filter that automatically detaches, i.e. saves to a folder outside of TB and deletes from the message, attachments, according to criteria such as 'Subject contains <insert text>' or 'From contains <insert address or domain>' etc. Unfortunately, I don't think there's a way to distinguish between benign files such as .jpg and unwanted ones such as .vbs. But at least the attachments would be removed from TB. You could of course also set the filter to delete the messages if you could define suitable criteria, or simply move all messages with attachments to a separate folder.

more options

I was hoping for something like a filter that could just pick up on the file extension. The problem is that these are coming from different domains all of the time on the subject is never the same so I can't use this to distinguish what is a legitimate email or what is a dangerous email. The only thing I can use which is consistent is the filename, most of the filenames I get are .ISO and .CAB which as you would know on a Windows machine are pretty dangerous if deployed. There must be some smart person out there who can make some sort of filter to pick up on these malicious filenames

more options

There is a way to search a folder for specific attachment types, e.g.with the Expression Search add-on, but this is a manual process. I'm not aware of a way to do this with an automatic filter.