Blocking Email attachments
Results 1 to 3 of 3

Thread: Blocking Email attachments

  1. #1
    Join Date
    Jan 2003
    Location
    Eagle, Idaho
    Posts
    650

    Blocking Email attachments

    Because of the CryptoLocker Ransomware threat, I've blocked .rar, .zip, .bat, and .exe. Should anything else be blocked?

    Using Outlook 2007

    Thanks for any info!
    Rod

  2. #2
    Join Date
    Jun 2001
    Location
    Albuquerque, NM USA
    Posts
    14,686
    Rodney M--This reference has a list of extensions
    http://blog.malwarebytes.org/intelli...-need-to-know/

    Note that the ones you mention are not on the list. Surprisingly .jpg is. It is possible CryptoLocker is using double file extensions.

    But there may not be a need to block attachments. Rather download them and do not open them until you first scan them with antivirus and antimalware programs with latest definitions. Note the MalwareBytes link suggests you may need the Pro version, but it is not entirely clear whether that is pre- or post- infection. (Your email provider may also offer an automatic scan. )
    Last edited by Welshjim; November 9th, 2013 at 04:54 PM.
    Jim
    WIN7 Ultimate SP1 64bit, IE 11, NTFS,
    cable, MS Security Essentials, Windows 7 firewall

  3. #3
    HAN's Avatar
    HAN is offline Virtual PC Specialist!!!
    Join Date
    Feb 2002
    Location
    USA
    Posts
    4,319
    At work, for attachments, I blocked all executables (including com, exe, scr, pif (which are the most common found spreading the virus)) and ALL compressed files (including rar, 7z and zip.)

    Plus I really spent time talking to all PC users about not clicking on any links in email. I have read that some of Cryptolocker infections have been spread through phishing.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •