Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Using Windows SBS 2003 and Outlook 2007.

We just received an email virus in a jar file. For most users Outlook blocked the attachment as per usual, but unfortunately on one users computer this didn't happen.

  • Tools -> Attachment Handling shows the security mode set to default.
  • There are no strange entries in HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Security

Anyone got any other ideas on why this computer allowed the attachment to run?

share|improve this question
1  
Stop relying on Outlook to do this and get a decent anti-virus product instead. – John Gardeniers Jan 25 '13 at 9:26
    
Hi John. I probably should have mentioned that we do have anti virus on both the pcs and the firewall. However the file seems to escape detection. I uploaded it to VirusTotal and only 1 of 46 scanners correctly identified it. I was more thinking of outlooks response as a defense in depth measure. Given some number of viruses will always escape detection, why did Outlook let one computer execute the file? – Mike Walsh Jan 26 '13 at 2:09
    
Many an admin has gone mad trying to figure out why Outlook on machine A does one thing while using the exact same setup on machine B does something else. Outlook is notoriously unpredictable with these things and it's best not to rely on it doing the right thing and treat it as a bonus when it does. When all's said and done it is after all a mail client, not an anti-virus product. – John Gardeniers Jan 26 '13 at 22:54

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.