Results 1 to 3 of 3
  1. #1
    Billy T
    Guest

    Default Where does ZoneAlarm MailSafe quarantine suspect attachments?

    Hi Team

    ZA MailSafe just picked up a suspect attachment (with an xxx.doc.xxx file name) and since it looks like it comes from one of my clients, I want to look at it to see what the original file type was in case it is legit.

    Using Ztree I have done a full computer search for the file name (book favs.doc.zlo) but can't find it anywhere. Curiously, ZA usually numbers quarantined files zl0 to zl9 but this is definitely zlo. I couldn't find it searching on either suffix anyway.

    I use Outlook so my best guess is that it's hidden in Outlook.pst.

    Does anybody know where else to look? I can always try to open it and then ZA will let me save it instead of opening, but I have a pathological aversion to attempting to open any suspect file.

    I don't want to go direct to the client until I am sure it is a problem.

    Oh yes, and another funny thing, my search turned up a copy of W32.Magistr.39921@mm in the Norton Quarantine but Nortons said that their quarantine was empty. Now manually deleted but go figure ?:|

    Cheers

    Billy 8-{)


  2. #2
    Mike
    Guest

    Default Re: Where does ZoneAlarm MailSafe quarantine suspect attachments?

    > Using Ztree I have done a full computer search for
    > the file name (book favs.doc.zlo) but can't
    > find it anywhere. Curiously, ZA usually numbers
    > quarantined files zl0 to zl9 but this is definitely
    > zlo. I couldn't find it searching on either suffix
    > anyway.

    If it was a xxxx.doc.xxxx file, wouldn't it be something like "book favs.doc.xxxx.zlo"?

    Mike.

  3. #3
    Billy T
    Guest

    Default Re: Where does ZoneAlarm MailSafe quarantine suspect attachments?

    Sorry Mike, ZA always replaces the actual file type with zl plus a single digit file number. It doesn't add a further suffix.

    I think I can read the original file type if I try to open it but that would be an unnecessary risk IMHO.

    If I can't find it ,I'll just delete it, but for reasons stated I'd like to know what it is all about.

    Cheers

    Billy 8-{)

Similar Threads

  1. suspect e-mails
    By bonzo29 in forum PressF1
    Replies: 4
    Last Post: 14-03-2005, 02:36 PM
  2. Deleting stuff out of Ad-Aware quarantine
    By Misty in forum PressF1
    Replies: 4
    Last Post: 11-11-2003, 10:07 PM
  3. Replies: 1
    Last Post: 16-06-2002, 03:40 PM
  4. recycle bin is a quarantine?
    By in forum PressF1
    Replies: 2
    Last Post: 11-06-2002, 06:01 PM
  5. Virus Quarantine
    By in forum PressF1
    Replies: 2
    Last Post: 01-10-2001, 08:47 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •