Outlook 2003 unsafe attachments

[Dan Weikert]

It appears Microsoft has modified the Level1 attachment functionality
on Outlook 2003. I've added all the supposed level 1 extensions to the
Level1Remove registry entry. I've installed Slovak's Attachment
Options (http://www.slovaktech.com/attachmentoptions.htm) and had it
move all the level1 attachments to level2 and I'm still having
problems with blocked attachments. The one that prompted this post was
a Quark document sent to us by a client named "7 X 10 (1 COL.)" Yeah,
I know that's a lousy file name for a PC to understand, but I should
still be able to gain access to it so I can rename it to something
useable. I even tried adding ".)" to the Level1Remove registry entry,
but Outlook 2003 still refuses to give me access. Anybody have a clue
how I can disable this "feature" altogether? At this point, I'm afraid
to install 2003 on any more of my user's machines since we're dealing
with barely computer literate clients in many cases, explaining to
them why we can't access their attachments is not something I look
forward to. Microsoft, if you're listening, FIX THIS!!!!

 

[Ken Slovak - [MVP - Outlook]]

The problem is not that Outlook 2003 added new restricted attachments but
that ")" is an illegal character in a file name. Can anyone with an earlier
version of Outlook (on the same version of Windows) do anything with a file
like that?

 

[Dan Weikert]

Ummm... since when is ) and invalid Microsoft filename character? I
saved the attached file from Outlook 2000 without any problems on a
Windows 2000 machine, then copied it to the XP machine with Office
2003. I can use the file on the XP machine with the ) and ( in the
file name. Anybody else want to try?

 

[Dan Weikert]

I also just verified I could access this file from Outlook 2002 on
another XP machine. Obviously it IS something with Outlook 2003.

 

[Ken Slovak - [MVP - Outlook]]

Yes, sorry about that with ".)" being not a valid extension. I just tested
here and it seems that Outlook 2003 is blocking that as an unsafe attachment
and even adding it to Level1Remove doesn't change it's being regarded as
unsafe.

It does seem that Outlook 2003 added this and it is the same on Outlook 2003
running on Windows 2000. I would suggest that you write to MS at
(e-mail address removed) with Outlook in the subject and mention this as
something that is broken and needs fixing. Whether or not it gets fixed is
of course up to MS. In the meantime, the only workarounds I can think of
would be to zip the attachments or rename them and then name them back after
they are received.

I'll also file this as a bug in Outlook 2003 and escalate it but I have no
idea if that will get a fix done.

 

[Ken Slovak - [MVP - Outlook]]

I just received word from Microsoft that in Outlook 2003 extensions without
alphanumeric characters are treated as restricted attachments and at the
moment that's not configurable. They are working on a hotfix for that to
make those extensions configurable.

I don't know yet if they will be able to be added to Level1Remove or if the
behavior of previous versions of Outlook will be restored. Once the hotfix
is released you would be able to call Microsoft's Product Support Services
(PSS) to obtain that hotfix. The hotfix and the call to PSS would be free.

 

[Ken Slovak - [MVP - Outlook]]

There will be a fix as soon as the hotfix is released. Keep an eye on
www.slipstick.com, they usually post notices of any hotfixes that become
available. What we don't know yet is if the fix would be to allow those
extensions for Level1Remove or another solution will be used.

Thanks Ken,

Nice to know there's an explanation. Only wish there were a fix.

Kind of ironic that in the interest of user friendly Microsoft added the

features to Outlook that made it virus prone. Now in the interest of
security usability is taking the hit. The pendulum swings...