Filtering email message attachments

The attachment filtering functionality is not applied to outgoing email messages.

Malicious programs can be distributed in the form of attachments in email messages. You can configure filtering based on the type of message attachments so that files of the specified types are automatically renamed or deleted. By renaming an attachment of a certain type, Kaspersky Endpoint Security can protect your computer against automatic execution of a malicious program.

To configure filtering of attachments:

1. In the main application window, click the Settings button.
2. In the application settings window, select Essential Threat Protection → Mail Threat Protection.
3. In the Security level section, click the Settings button.

   The Mail Threat Protection window opens.

4. In the Mail Threat Protection window, select the Attachment filter tab.
5. Do one of the following:
   • If you do not want the Mail Threat Protection component to filter message attachments, select the Disable filtering option.
   • If you want the Mail Threat Protection component to rename message attachments of the specified types, select the Rename attachments of selected types option.

     Note that the actual format of a file may not match its file name extension.

     If you enabled filtering of email attachments, the Mail Threat Protection component may rename or delete files with the following extensions:

     com – executable file of an application no larger than 64 KB

     exe – executable file or self-extracting archive

     sys – Microsoft Windows system file

     prg – program text for dBase™, Clipper or Microsoft Visual FoxPro®, or a WAVmaker program

     bin – binary file

     bat – batch file

     cmd – command file for Microsoft Windows NT (similar to a bat file for DOS), OS/2

     dpl – compressed Borland Delphi library

     dll – dynamic link library

     scr – Microsoft Windows splash screen

     cpl – Microsoft Windows control panel module

     ocx – Microsoft OLE (Object Linking and Embedding) object

     tsp – program running in split-time mode

     drv – device driver

     vxd – Microsoft Windows virtual device driver

     pif – program information file

     lnk – Microsoft Windows link file

     reg – Microsoft Windows system registry key file

     ini – configuration file which contains configuration data for Microsoft Windows, Windows NT, and some applications

     cla – Java class

     vbs – Visual Basic® script

     vbe – BIOS video extension

     js, jse – JavaScript source text

     htm – hypertext document

     htt – Microsoft Windows hypertext header

     hta – hypertext program for Microsoft Internet Explorer®

     asp – Active Server Pages script

     chm – compiled HTML file

     pht – HTML file with integrated PHP scripts

     php – script that is integrated into HTML files

     wsh – Microsoft Windows Script Host file

     wsf – Microsoft Windows script

     the – Microsoft Windows 95 desktop wallpaper file

     hlp – Win Help file

     eml – Microsoft Outlook Express email message

     nws – new Microsoft Outlook Express email message

     msg – Microsoft Mail email message

     plg – email message

     mbx – saved Microsoft Office Outlook email message

     doc* – Microsoft Office Word documents, such as: doc for Microsoft Office Word documents, docx for Microsoft Office Word 2007 documents with XML support, and docm for Microsoft Office Word 2007 documents with macro support

     dot* – Microsoft Office Word document templates, such as: dot for Microsoft Office Word document templates, dotx for Microsoft Office Word 2007 document templates, dotm for Microsoft Office Word 2007 document templates with macro support

     fpm – database program, Microsoft Visual FoxPro start file

     rtf – Rich Text Format document

     shs – Windows Shell Scrap Object Handler fragment

     dwg – AutoCAD® drawing database

     msi – Microsoft Windows Installer package

     otm – VBA project for Microsoft Office Outlook

     pdf – Adobe Acrobat document

     swf – Shockwave® Flash package object

     jpg, jpeg – compressed image graphics format

     emf – Enhanced Metafile format file;

     ico – object icon file

     ov? – Microsoft Office Word executable files

     xl* – Microsoft Office Excel documents and files, such as: xla, the extension for Microsoft Office Excel, xlc for diagrams, xlt for document templates, xlsx for Microsoft Office Excel 2007 workbooks, xltm for Microsoft Office Excel 2007 workbooks with macro support, xlsb for Microsoft Office Excel 2007 workbooks in binary (non-XML) format, xltx for Microsoft Office Excel 2007 templates, xlsm for Microsoft Office Excel 2007 templates with macro support, and xlam for Microsoft Office Excel 2007 plug-ins with macro support

     pp* – Microsoft Office PowerPoint® documents and files, such as: pps for Microsoft Office PowerPoint slides, ppt for presentations, pptx for Microsoft Office PowerPoint 2007 presentations, pptm for Microsoft Office PowerPoint 2007 presentations with macros support, potx for Microsoft Office PowerPoint 2007 presentation templates, potm for Microsoft Office PowerPoint 2007 presentation templates with macro support, ppsx for Microsoft Office PowerPoint 2007 slide shows, ppsm for Microsoft Office PowerPoint 2007 slide shows with macro support, and ppam for Microsoft Office PowerPoint 2007 plug-ins with macro support

     md* – Microsoft Office Access® documents and files, such as: mda for Microsoft Office Access workgroups and mdb for databases

     sldx – a Microsoft PowerPoint 2007 slide

     sldm – a Microsoft PowerPoint 2007 slide with macro support

     thmx – a Microsoft Office 2007 theme

      

   • If you want the Mail Threat Protection component to delete message attachments of the specified types, select the Delete attachments of selected types option.
6. If you selected the Rename attachments of selected types option or the Delete attachments of selected types option during the previous step, select the check boxes opposite the relevant types of files.
7. Save your changes.