Move emails by attachment

[Helios]

Hello World

I am facing a delimma where the onslaught of mass mailing worms has generated hundreds of virus emails per day for my users. My AV scanner catches the virus-infected emails and strips out the infected attachments and replaces them with a virus_removed.txt attachment. However to my dismay the AV scanner cannot add text to the subject or body of the email and Outlook cannot scan by attachment name. Is there an easy script I can write/download that will look at new message incoming to the Inbox and if the attachment name matches "virsu_removed.txt" it moves the message to a separate Outlook folder for later review? I prefer this to be run on the client side because some of my users prefer not to have this functionality

Any help would be greatly appreciated

Thanks
Helio
EMAIL: hsyu AT osu.edu

 

[Zelgin]

I've written some add-ins for myself. The thing that
makes this problem a bit difficult is detecting exactly
what e-mail messages' attachments to scan. Outlook's
object model doesn't provide a good way to let
programmers know what's changed in the user's folders
since the last time the program ran.

A really simple add-in might say "when new mail arrives"
check it for an attachment with a particular name and if
it matches then move it to another folder. But if mail
arrives while Outlook is not running the "new mail" event
doesn't necessarily fire for that mail even when the user
launches Outlook later on. So the tricky part is
scanning for new e-mail messages, and not just in the
Inbox because some users have rules that move e-mail to
different folders.

That said, I'd bet I could write a little add-in for you
that does what you want. I'm new to this game so I'm
willing to work for references. You get free software, I
get a good reference if I do a good job. If you don't
find an easy answer within the newsgroup and you're
interested please contact me (Joe) at Support At X Dot
Com, where X = Zelgin.

Zelgin

 

[Cain T. S. Random]

There IS a relatively easy way to get incremental changes: ICS (Incremental
Change Synchronization). However, for something like this, you could get
away with using the Creation Time of the message since you only need to scan
it once. I don't write add-ins, but in pure MAPI terms what you're trying
to do should be fairly straight-forward.

 

[Zelgin]

I've never written a MAPI store provider which is what I
think you're referring to below, but I've heard they're
pretty hard to create. You have to know C++, COM, and
MAPI. And the gentleman below asked for a "an easy
script I can write/download".

I wonder what the "Hello World" MAPI store provider
program looks like .

Zelgin

 

[Cain T. S. Random]

Hey, it's not my fault the API sucks.