Announcement: New Knowledge Base

4 June 2020: We are pleased to announce the launch of a new Knowledge Base, Changelogs for Business Security Products, where you can find more details, such as bugfixes or new features, about the most recent releases of our business-related products.

Scan Outlook archived PST files

F-Secure had virus alert on one of the user's email archived pst file. That archived file is over 200MB. F-Secure doesn't seems to be able to report which file was infected. Also it seems like F-Secure is not able to clean or quarantine any malicious items within the archived pst file. What are my options? Also, can F-Secure scan inside any pst files? Thanks in advance for assistance.

Comments

  • SeanVSeanV Posts: 38

    Dear Nippy,

    With regards to your enquiry, kindly refer to the below community post:

     

    http://community.f-secure.com/t5/Security-for-PC/How-to-find-which-mailbox-is/td-p/30358
     
    Thanks.
    Best Regards,
    Sean Veloo

    ..........................................................................................................................................................................................................................
    Has somebody helped you? Say thanks by giving kudos. Has your issue been solved? Mark the post using "Accept As Solution" button to let others know.

    Chrissy
  • NikKNikK Posts: 931

    If anyone finds this thread you should know that there is a VBA program(code) that can extract and save all attachments from an Outlook folder including subfolders, so you then easily can scan the folder with all attachments to find which emails are infected. Each file name includes the name of the datafile(PST), folder name, email subject and attachment name so it's easy to identify and delete those emails in Outlook.

    It only extracts the attachments because it's highly unlikely that an email body is infected. And that also heavily reduces the number of files that needs to be created on the hard drive. It's been tested and proved successful with over 2 GB of emails. 

     

    Instructions and the VBA code can be found here:

    http://community.f-secure.com/t5/Security/virus-s-imside-Aquarius/m-p/40627/highlight/true#M7398

     

    In case you run into any problem, also read the following 2 pages in the linked thread above. Those cover the most likely problem scenarios.

This discussion has been closed.