Filtering email message attachments

Malicious programs can be distributed in the form of attachments in email messages. You can configure filtering based on the type of message attachments so that files of the specified types are automatically renamed or deleted. By renaming an attachment of a certain type, Kaspersky Endpoint Security can protect your computer against automatic execution of a malicious program.

To configure filtering of attachments:

1. Open the application settings window.
2. In the left part of the window, in the Anti-Virus protection section, select the Mail Anti-Virus subsection.

   In the right part of the window, the settings of the Mail Anti-Virus component are displayed.

3. In the Security level section, click the Settings button.

   The Mail Anti-Virus window opens.

4. In the Mail Anti-Virus window, select the Attachment filter tab.
5. Do one of the following:
   • If you do not want Mail Anti-Virus to filter message attachments, select the Disable filtering option.
   • If you want Mail Anti-Virus to rename message attachments of the specified types, select the Rename specified attachment types option.

     Note that the actual format of a file may not match its file name extension.

     If you enable the filtering of objects that are attached to email messages, Mail Anti-Virus may rename or delete files with the following extensions:

     com – executable file of an application no larger than 64 KB

     exe – executable file or self-extracting archive

     sys – Microsoft Windows system file

     prg – program text for dBase, Clipper or Microsoft Visual FoxPro®, or a WAVmaker program

     bin – binary file

     bat – batch file

     cmd – command file for Microsoft Windows NT (similar to a bat file for DOS), OS/2

     dpl – compressed Borland Delphi library

     dll – dynamic link library

     scr – Microsoft Windows splash screen

     cpl – Microsoft Windows control panel module

     ocx – Microsoft OLE (Object Linking and Embedding) object

     tsp – program running in split-time mode

     drv – device driver

     vxd – Microsoft Windows virtual device driver

     pif – program information file

     lnk – Microsoft Windows link file

     reg – Microsoft Windows system registry key file

     ini – configuration file which contains configuration data for Microsoft Windows, Windows NT, and some applications

     cla – Java class

     vbs – Visual Basic® script

     vbe – BIOS video extension

     js, jse – JavaScript source text

     htm – hypertext document

     htt – Microsoft Windows hypertext header

     hta – hypertext program for Microsoft Internet Explorer®

     asp – Active Server Pages script

     chm – compiled HTML file

     pht – HTML file with integrated PHP scripts

     php – script that is integrated into HTML files

     wsh – Microsoft Windows Script Host file

     wsf – Microsoft Windows script

     the – Microsoft Windows 95 desktop wallpaper file

     hlp – Win Help file

     eml – Microsoft Outlook Express message

     nws – new Microsoft Outlook Express email message

     msg – Microsoft Mail email message

     plg – email message

     mbx – extension for saved Microsoft Office Outlook emails

     doc* – Microsoft Office Word documents, such as: doc for Microsoft Office Word documents, docx for Microsoft Office Word 2007 documents with XML support, and docm for Microsoft Office Word 2007 documents with macro support

     dot* – Microsoft Office Word document templates, such as: dot for Microsoft Office Word document templates, dotx for Microsoft Office Word 2007 document templates, dotm for Microsoft Office Word 2007 document templates with macro support

     fpm – database program, Microsoft Visual FoxPro start file

     rtf – Rich Text Format document

     shs – Windows Shell Scrap Object Handler fragment

     dwg – AutoCAD® drawing database

     msi – Microsoft Windows Installer package

     otm – VBA project for Microsoft Office Outlook

     pdf – Adobe Acrobat document

     swf – Shockwave® Flash package object

     jpg, jpeg – compressed image graphics format

     emf – Enhanced Metafile format file. Next generation of Microsoft Windows OS metafiles. EMF files are not supported by 16-bit Microsoft Windows.

     ico – object icon file

     ov? – Microsoft Office Word executable files

     xl* – Microsoft Office Excel documents and files, such as: xla, the extension for Microsoft Office Excel, xlc for diagrams, xlt for document templates, xlsx for Microsoft Office Excel 2007 workbooks, xltm for Microsoft Office Excel 2007 workbooks with macro support, xlsb for Microsoft Office Excel 2007 workbooks in binary (non-XML) format, xltx for Microsoft Office Excel 2007 templates, xlsm for Microsoft Office Excel 2007 templates with macro support, and xlam for Microsoft Office Excel 2007 plug-ins with macro support

     pp* – Microsoft Office PowerPoint® documents and files, such as: pps for Microsoft Office PowerPoint slides, ppt for presentations, pptx for Microsoft Office PowerPoint 2007 presentations, pptm for Microsoft Office PowerPoint 2007 presentations with macros support, potx for Microsoft Office PowerPoint 2007 presentation templates, potm for Microsoft Office PowerPoint 2007 presentation templates with macro support, ppsx for Microsoft Office PowerPoint 2007 slide shows, ppsm for Microsoft Office PowerPoint 2007 slide shows with macro support, and ppam for Microsoft Office PowerPoint 2007 plug-ins with macro support

     md* – Microsoft Office Access® documents and files, such as: mda for Microsoft Office Access workgroups and mdb for databases

     sldx – a Microsoft PowerPoint 2007 slide

     sldm – a Microsoft PowerPoint 2007 slide with macro support

     thmx – a Microsoft Office 2007 theme

      

   • If you want Mail Anti-Virus to delete message attachments of the specified types, select the Delete specified attachment types option.
6. If you selected the Rename specified attachment types option or the Delete specified attachment types option during the previous step, select the check boxes opposite the relevant types of files.

   You can change the list of file types by using the Add, Edit, and Remove buttons.

7. Click OK.
8. To save changes, click the Save button.