block attachments

[Guest]

My network is infected to W32.sober.i@mm... virus. All my users get email
from different forged email address email with *.zip, *.src ... so on
attachments couple of times a day. All computers have up to date antivirus sw
and I run everysingle on them soberfix tool from Norton, found nothing. I've
been blocking these email address, but they keep coming from different
address, so I gave up. Is there any way I can block certain attachments
except *.xls and *.doc?
We use the following:
Outlook 2003, Outlook2000, and Outlook express.

 

[neo [mvp outlook]]

Who/What provides e-mail services on the server side? (e.g. ISP or internal
mail server? If internal mail server, I would look for a solution that
integrates with your e-mail server)

 

[Guest]

'Cavalier' provides internet (email too) service, I called them and was told
they cannot block any attachments or email.

 

[neo [mvp outlook]]

Well, Outlook 2003 will block access to certain file types by default. (You
can get the list from http://www.slipstick.com/outlook/esecup.htm) This
list can be modified via a policy object. (You will be using the Level1Add
registry key to list additional file extensions.)

Office/Outlook 2000 will require you to apply SP2 or later to get the same
security enhancements that are in Outlook 2003. (blocking access to certain
file types and/or object model guard)

The latest version of Outlook Express also has a feature that blocks access
to specific file types. While it normally turned on by default, it doesn't
take much for users to visit the security tab in OE and turn it off. I
would have to do some research to see if there is a way to disable the
option of the user to turn it off via the user interface.

The problem is that trying to block at the client level is a pain in the
tush as many internet security products are not known to strip. Scan/clean
is about their limit when they have current definitions.

 

[Guest]

that's all i need to know
thank you Neo

Well, Outlook 2003 will block access to certain file types by default. (You
can get the list from http://www.slipstick.com/outlook/esecup.htm) This
list can be modified via a policy object. (You will be using the Level1Add
registry key to list additional file extensions.)

Office/Outlook 2000 will require you to apply SP2 or later to get the same
security enhancements that are in Outlook 2003. (blocking access to certain
file types and/or object model guard)

The latest version of Outlook Express also has a feature that blocks access
to specific file types. While it normally turned on by default, it doesn't
take much for users to visit the security tab in OE and turn it off. I
would have to do some research to see if there is a way to disable the
option of the user to turn it off via the user interface.

The problem is that trying to block at the client level is a pain in the
tush as many internet security products are not known to strip. Scan/clean
is about their limit when they have current definitions.

 

[Sr. Bocadillo]

I use a little plug-in program called 'attachment options' from

http://www.slovaktech.com/attachmentoptions.htm

to block certain attachments. Failing that there's always the firewall.