I misspoke...not "run the file from Outlook"...I meant "run the file from Word".
Larry From: Brown, Larry [mailto:[email protected]] Sent: Friday, December 10, 2010 8:25 AM To: MS-Exchange Admin Issues Cc: McCready, Rob; Bohn, Rick Subject: Embedded executables in Word Docs Exchange 2007 with 1 CCR & 2 Hubs internally and 2 Edge Transports on a DMZ. Client: Outlook 2007 We block a whole list of attachments (.exe, .bat, .com, etc) from entering the domain. Internally, Outlook keeps users from seeing "dangerous" files if they are sent as attachments. So I was gob-smacked yesterday when someone showed me that they could embed a .exe in to a Word doc and send it both internally and externally...and then run the file from Outlook. Maybe this is a known issue with an easy fix, but it was news to me. I've done a couple of searches with Google and nothing has turned up. I'm assuming that a known virus will still get caught by our AV. What worries me is a new scam with an embedded virus saying, "Click me to see the pretty pictures" or some such silliness. Is there a way to block Word attachments with embedded files? Larry C. Brown LAN/WAN CS Support Dayton Power & Light (937)-331-4922 --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe exchangelist
