The Outlook E-mail Attachment Security Update changes the way Outlook handles attached program files (.exe, .com, .bat, .cmd) and other potentially dangerous files when you try to open them from inside a mail message. The idea is to make it harder for viruses such as Worm.ExploreZip Virus to get through.
Availability and Setup
To patch Outlook 2000 for attachment security, install Office Service Release 1/1a (SR1).
For Outlook 98, download the Outlook 98 version, quit Outlook, and then run the file that you downloaded.
For Outlook 97, download the Outlook 97 version, quit Outlook, and then run the file that you downloaded.
After installing the patch, you should check your attachment security setting:
- Choose Tools | Options, and switch to the Security tab.
- On the Security tab, click Attachment Security.
- Make sure that the Security method is set to High.
- Click OK until you return to Outlook's main window.
If you install a later patch for Outlook 2000 that does not include the components of the Outlook E-mail Security Update, the Attachment Security button may be missing. See OL2000 The Attachment Security Button Is Missing for a fix.
With the Attachment Security Update installed, when you open a program file or other protected file attached to an e-mail message, Outlook displays a dialog like this:
With the update installed, you do not have the option of running a program file directly. You must save it to disk before you can run it.
In the Outlook 2000 SR1 version, you can bring more file types under this protection. See XCLN How to Modify the Behavior of the Attachment Security Warning in Outlook 2000 SR-1 for details on the required changes to the Windows Registry.