Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Winmail.dat exploit
  FAQ FAQ  Forum Search   Register Register  Login Login

Winmail.dat exploit

 Post Reply Post Reply
Author
Alex99 View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Alex99 Quote  Post ReplyReply Direct Link To This Post Topic: Winmail.dat exploit
    Posted: 04 November 2005 at 1:32am

 

Has anyone encountered this file? When an Outlook user composes and sends a message using either Rich Text Format or HTML Format, Outlook automagically generates a file, winmail.dat, and attaches it to the end of the message. winmail.dat contains formatting information, in a human-unreadable form, that Outlook at receiving endl uses to display this email message correctly

according to microsoft, winmail.dat file can contain file attachments as well.

Don't know exact wording ... is called transparent mime?

my questions are: Does spamfilter-antivirus detect viruses in winmail.dat file.

Does keyword filter treat "encoded" contents in winmail.dat file??

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 04 November 2005 at 4:58pm
SpamFilter will not look for keywords within winmail.dat. That attachment contains RTF and other extra pieces of info used by Exchange servers and Outlook clients. To most other email clients the file is just an annoying attachment.

You are correct in stating that microsoft may add a message's file attachments to the winmail.dat. I hope for Microsoft that they do not  do it often, as probably only their own Outlook client will be able to decode them...

Unfortunately we do not have an answer on the antivirus question, as we have yet to find one that has been included in the winmail.dat file.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.063 seconds.