|

Watch Those File Attachments

Multiple recent incidents of clients having difficulties with email attachments have set me to calling people to remind them of good security practices with email. You don’t have to be a victim.

Dealing correctly with attachments to emails is extremely important because it has become one of the primary vectors for attacking your machine. The movies give us the idea of a technically savvy computer geek working hours to find the backdoor into your computer. That sort of thing can happen, but exploiting the human factor is by far the easiest way to get unauthorized access to a computer and wreak havoc.

Besides the basic good practice of making certain you know who sent you the email, I am a Premiere Avast Partner, and all of my clients have Avast Business Security. I receive texts if your system is infected so that I can respond quickly.

But you can protect yourself. If you have the faintest inkling of a doubt about something you receive as an email attachment check it. Here’s how:

  1. Don’t open the file directly from your email. Download it first. That means choosing “Save” or “Save As” rather than “Run” or “Open.” I recommend creating a folder in which to download questionable files. That makes them easy to find.
  2. Right-click on the name of the file you just downloaded.
  3. If you have Avast (which you will if you’re my client, you will have the options “Scan selected items for viruses,” “Shred using Avast,” “Run in sandbox,” and “Always run in sandbox.”
  4. While running in the sandbox is of interest, few of you will want to use that. Use “Scan selected items for viruses.”
  5. Hopefully you get the clear message shown below. If you, you can choose your action. I prefer “Delete,” but “File Chest” is OK.
  1. Don’t open the file directly from your email. Download it first. That means choosing “Save” or “Save As” rather than “Run” or “Open.” I recommend creating a folder in which to download questionable files. That makes them easy to find.
  2. Right-click on the name of the file you just downloaded.
  3. If you have Avast (which you will if you’re my client, you will have the options “Scan selected items for viruses,” “Shred using Avast,” “Run in sandbox,” and “Always run in sandbox.”
  4. While running in the sandbox is of interest, few of you will want to use that. Use “Scan selected items for viruses.”
  5. Hopefully you get the clear message shown below. If you, you can choose your action. I prefer “Delete,” but “File Chest” is OK.
This is a good result. If there is a virus detected, you will have the option to take action.

The key is to never open a file unless you are certain what it is and what it is going to do to your computer.

Similar Posts

  • |

    AI and Your Security Online

    Every advance in technology offers us new opportunities. Some of these opportunities are used constructively, some not so much. AI on the March! There are a number of issues with the use of AI, but this post is more of a warning. Just as some positive activities are enhanced by the use of AI, so…

  • |

    Installation fun with Security Update for .NET Framework Service Pack 1.1

    I normally assume my Windows updates will occur with a minimum of fuss and bother, and in fact it took me several rounds to even realize what was going on this morning. I kept getting an “updates ready to install” notice, and I kept telling it to install. I was too busy with morning activities…

  • | |

    Remind Employees (and Yourself)

    To maintain information you need to regularly remind yourself and your employees to be attentive in their use of tools. We learn to follow certain safety rules with power tools, but often we forget to be similarly attentive with the devices that store and (hopefully) protect our information Some (but by no means all) things…

  • Passwords

    SmartPlanet has a list of the 25 worst passwords of 2011. It’s good to read the comments as well. Computer people tend to make the error of thinking that any password that’s hard to guess is good, and the harder the better. But the fact is that people tend to write down passwords that are…

  • A Scam Email

    Several people have asked me very recently about scam emails. I don’t mind being asked, but there are some signs you should look at. I’m going to include a partial screenshot here. Here are several key signs: Lousy grammar. I’ve underlined a couple of items. Valid emails can have grammatical errors, but this sounds like…

Leave a Reply

Your email address will not be published. Required fields are marked *