Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Using Windows SBS 2003 and Outlook 2007.

We just received an email virus in a jar file. For most users Outlook blocked the attachment as per usual, but unfortunately on one users computer this didn't happen.

  • Tools -> Attachment Handling shows the security mode set to default.
  • There are no strange entries in HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Security

Anyone got any other ideas on why this computer allowed the attachment to run?

share|improve this question
1  
Stop relying on Outlook to do this and get a decent anti-virus product instead. –  John Gardeniers Jan 25 '13 at 9:26
    
Hi John. I probably should have mentioned that we do have anti virus on both the pcs and the firewall. However the file seems to escape detection. I uploaded it to VirusTotal and only 1 of 46 scanners correctly identified it. I was more thinking of outlooks response as a defense in depth measure. Given some number of viruses will always escape detection, why did Outlook let one computer execute the file? –  Mike Walsh Jan 26 '13 at 2:09
    
Many an admin has gone mad trying to figure out why Outlook on machine A does one thing while using the exact same setup on machine B does something else. Outlook is notoriously unpredictable with these things and it's best not to rely on it doing the right thing and treat it as a bonus when it does. When all's said and done it is after all a mail client, not an anti-virus product. –  John Gardeniers Jan 26 '13 at 22:54

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.