Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Enabling Attachment Blocking OLE Scan feature in ScanMail for Exchange (SMEX) 12.5

    • Updated:
    • 22 Jan 2019
    • Product/Version:
    • ScanMail for Exchange 12.5
    • Platform:
    • N/A N/A
Summary
The Attachment Blocking OLE Scan feature of SMEX is disabled by default. Activate this feature to scan Microsoft Office files that contain executable such as putty.exe.
Details
Public

To enable Attachment Blocking OLE Scan:

  1. Download and Install SMEX 12.5 SP1.
  2. Open the Registry Editor.

     
    Always back up the whole registry or the registry hive before making any modifications. Incorrect changes to the registry can cause serious system problems.
  3. Go to HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\CurrentVersion.

    Right-click “CurrentVersion” hive and select Export, then save the SMEX registry hive.

  4. Add the following registry key to enable the OLE Scan feature for 32-bit value:

    Key: ABOLEScanLayer
    Type: Dword
    Value: 0 – 20

    Wherein 0 means disabled, and 1-20 means enabled and maximum scan layer.

    For example, ABOLEScanLayer = 5

  5. Add the following registry key to specify the file type to be scanned by OLE Scan feature:

    Key: ABContainerTypes
    Type: REG_SZ
    Value: 1;2;4;30;4045 is the default value

    Wherein the value is the ID list of VSAPI supported OLE container files. The values must be separated by semicolon (;).

    The following are the key meanings:

    • 1 = Word
    • 2 = PowerPoint
    • 4 = Excel
    • 30 = Project
    • 4045 = Office 2007 files
  6. Restart SMEX_Master.
 
To rollback these changes, simply go to the backup SMEX registry hive from step 3. Right-click on it and then select "Merge". This will replace the registry entries of the "CurrentVersion" hive and revert it back to the previous values.
Premium
Internal
Rating:
Category:
Configure
Solution Id:
1099638
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.