Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

How can I create a message filter that moves email containing an attached .exe file to a specific folder for later review?

  • 5 replies
  • 1 has this problem
  • 38 views
  • Last reply by gnealr

more options

I am trying to create a message filter in T-bird 45.2.0 on a Mac Air running OS X 10.7.5. When I look at the available conditions (Subject, To, From, cc etc.) for filter configuration, I do not find one that says or seems to be a proxy for something like: If 'message has an attachment' 'larger than/contains ___' then 'move/delete/mark message' to '. . .'. Hence the question above, "How can I create a message filter that moves email containing an attached .exe file to a specific folder for later review?"

Thank you, gnealr

I am trying to create a message filter in T-bird 45.2.0 on a Mac Air running OS X 10.7.5. When I look at the available conditions (Subject, To, From, cc etc.) for filter configuration, I do not find one that says or seems to be a proxy for something like: If 'message has an attachment' 'larger than/contains ___' then 'move/delete/mark message' to '. . .'. Hence the question above, "How can I create a message filter that moves email containing an attached .exe file to a specific folder for later review?" Thank you, gnealr

Chosen solution

I've checked this out and 'Attachment Status' is only available in the list if you select ' Filter After Junk Classification'.

Read this answer in context 👍 0

All Replies (5)

more options

This would create a filter to check if email has attachment greater than a given size and move to a specific folder, but there is no means of detecting whether the attachment is a .exe file.

In Message Filters select 'getting new mail' choose whether this should be before or after junk classification. select 'Match all of following' 'Attachment Status' and 'Is' and 'Has attachment' click on small + to create another line 'Size (kB)' and 'is greater than' and select the size in kB. perform these actions: 'Move message to' and choose the folder. clickon Ok enable the filter in the list by checking the checkbox.

more options

@Toad-Hall- Thank you for the reply; however, I do not have as a first variable choice "Attachment Status" only "Status". There is a new version of T-bird that became available a few minutes ago (45.3.0) so I will try installing it and revisiting your suggestion. Thank you again. gnealr

more options

The new version of T-bird did make the "Attachment Status" variable available. So, still at square one.

more options

Chosen Solution

I've checked this out and 'Attachment Status' is only available in the list if you select ' Filter After Junk Classification'.

more options

Bingo. Now all they need to do is add a variable that addresses the attributes of the attachment and we will have a working solution to the malicious attachment problem. thx -gneal