O:2003 - deleting messages by attachment name

[Wowbagger]

A lot of people out there haven't secured their systems so I am receiving up
to 200 copies of various worms each and every day. Norton Antivirus
appropriately catches and deletes the worm package then sends me a helpful
little email with the attachment Norton AntiVirus Deleted-1.txt telling me
what a great job it did. Now instead of getting 200 copies of the worm that
I have to delete I get 200 copies of an email telling me that I don't have
to delete the worm because NAV did it for me.

The subject lines of these messages vary quite a bit, and each new worm
brings its own list of possible subject lines making it impractical to
configure subject-based rules. Is there a way to tell Outlook to delete any
message with an attachment named "Norton AntiVirus Deleted-1.txt"?
(Symantec says that this is the way they designed the system and if I want
their help in automatically deleting the messages from their AV program I
will need to buy their antispam software as well.)

I receive lots of legitimate attachments from all kinds of (sometimes
unexpected) sources so whitelisting isn't practical either, I'm afraid.

Does anybody have any suggestions for me (other than switching to a new
antivirus program - I use what the office has).

 

[Roady [MVP]]

You could create a rule that looks for that attachment name in the header
and then delete the message.

--
Robert Sparnaaij [MVP-Outlook]
www.howto-outlook.com

Tips of the month:
-FREE tool; QuickMail. Create new Outlook items anywhere from within Windows
-Properly back-up and restore your Outlook data

-----
"Wowbagger" <none> wrote in message
A lot of people out there haven't secured their systems so I am receiving up
to 200 copies of various worms each and every day. Norton Antivirus
appropriately catches and deletes the worm package then sends me a helpful
little email with the attachment Norton AntiVirus Deleted-1.txt telling me
what a great job it did. Now instead of getting 200 copies of the worm that
I have to delete I get 200 copies of an email telling me that I don't have
to delete the worm because NAV did it for me.

The subject lines of these messages vary quite a bit, and each new worm
brings its own list of possible subject lines making it impractical to
configure subject-based rules. Is there a way to tell Outlook to delete any
message with an attachment named "Norton AntiVirus Deleted-1.txt"?
(Symantec says that this is the way they designed the system and if I want
their help in automatically deleting the messages from their AV program I
will need to buy their antispam software as well.)

I receive lots of legitimate attachments from all kinds of (sometimes
unexpected) sources so whitelisting isn't practical either, I'm afraid.

Does anybody have any suggestions for me (other than switching to a new
antivirus program - I use what the office has).

 

[Wowbagger]

Rule that deletes any message with "Norton AntiVirus Deleted-1.txt" in the
message header does not detect the attachments. How should I configure
this?

 

[Roady [MVP]]

Checked the header of the message and what exactly was written there? If you
specify that as 'specific words' it should work

--
Robert Sparnaaij [MVP-Outlook]
www.howto-outlook.com

Tips of the month:
-FREE tool; QuickMail. Create new Outlook items anywhere from within Windows
-Properly back-up and restore your Outlook data

 

[Wowbagger]

Checked the header of the message and what exactly was written there? If
you
specify that as 'specific words' it should work

Here are the headers that appears in 'options' -

Return-path: <[email protected]>
Envelope-to: {email address}
Delivery-date: Thu, 29 Dec 2005 14:30:10 -0800
Received: from [xx.xxx.xxx.xxx] (port=1328 helo=vwbnk.com)
by mail.xxxxx.com with smtp (Exim 4.52)
id 1Es6Hf-0006wz-9e; Thu, 29 Dec 2005 14:30:09 -0800
From: (e-mail address removed)
To: (e-mail address removed)
Date: Thu, 29 Dec 2005 22:13:14 UTC
Subject: Your Password
Importance: Normal
X-Mailer: SpeedMail_V9.5
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=====76f07ebd450d3fb"
Content-Transfer-Encoding: 7bit

 

[Roady [MVP]]

Then it won't work indeed. Some virusscanners/mailservers list the names of
the attachments in the header which is quite handy in situations like this.

--
Robert Sparnaaij [MVP-Outlook]
www.howto-outlook.com

Tips of the month:
-FREE tool; QuickMail. Create new Outlook items anywhere from within Windows
-Properly back-up and restore your Outlook data

-----
"Wowbagger" <none> wrote in message

Checked the header of the message and what exactly was written there? If
you
specify that as 'specific words' it should work

Here are the headers that appears in 'options' -

Return-path: <[email protected]>
Envelope-to: {email address}
Delivery-date: Thu, 29 Dec 2005 14:30:10 -0800
Received: from [xx.xxx.xxx.xxx] (port=1328 helo=vwbnk.com)
by mail.xxxxx.com with smtp (Exim 4.52)
id 1Es6Hf-0006wz-9e; Thu, 29 Dec 2005 14:30:09 -0800
From: (e-mail address removed)
To: (e-mail address removed)
Date: Thu, 29 Dec 2005 22:13:14 UTC
Subject: Your Password
Importance: Normal
X-Mailer: SpeedMail_V9.5
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=====76f07ebd450d3fb"
Content-Transfer-Encoding: 7bit