Jump to content

Delete zip file attachments containing .exe


FTL

Recommended Posts

@mauirixxx: The upgrade of EMSX should be support so you don't need to uninstall it first.

 

@Arakasi: Thanks.

 

You're welcome !

When i was network admin and operations for Citibank, i used to always bypass the exchange when sending internal program updates or personal .exe .com file extensions by double renaming the extensions to change format.

The fact ESET mail security does not allow that now is a huge improvement against end users when it comes to security and evil developers with malicious intent. :)

Link to comment
Share on other sites

Hello,

the rules based on content of an archive will be available in next major version of EMSX.

There are already rules to detect the real file type i.e. exe renamed to .doc will be picked as .exe, moreover there is a new rule to detect dangerous attachments with double extensions for example invoice.pdf.exe.

Is this the correct location to turn on deleting a zip file with an exe inside it?

ThreatSense engine parameter setup -> Options -> Potentially dangerous attachments

?

post-2202-0-91464600-1403766336_thumb.png

Link to comment
Share on other sites

  • 1 year later...
  • 2 weeks later...
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...