{"id":17122,"date":"2021-03-25T07:15:27","date_gmt":"2021-03-25T07:15:27","guid":{"rendered":"https:\/\/www.backupassist.com\/blog\/?p=17122"},"modified":"2021-04-16T07:59:34","modified_gmt":"2021-04-16T07:59:34","slug":"how-backupassist-365-handles-viruses-and-malware-in-mailboxes","status":"publish","type":"post","link":"https:\/\/www.backupassist.com\/blog\/how-backupassist-365-handles-viruses-and-malware-in-mailboxes","title":{"rendered":"How BackupAssist 365 handles viruses and malware in mailboxes"},"content":{"rendered":"\t\t
\n\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n

Contents:<\/strong><\/p>\n\n\n\n

  1. Summary \u2013 BackupAssist 365 keeps malware out of your mailbox backups<\/a><\/strong><\/li>
  2. How did the malware get in to start with?<\/a><\/strong><\/li>
  3. How does BackupAssist 365\u2019s safety feature solve this problem?<\/a><\/strong><\/li><\/ol>\n\n\n\n

    Summary: BackupAssist 365 keeps the malware out of your mailbox backups<\/h2>\n\n\n\n
    1. BackupAssist 365 lets Windows Defender and other virus scanners scan attachments before saving them to the backup PST files.<\/li>
    2. If a virus is found, BackupAssist will replace the virus with a simple text file, and save the item to the backup.<\/li>
    3. You\u2019ll see a note in the backup report to tell you what happened. After that, you won\u2019t be notified again.<\/li><\/ol>\n\n\n\n

      How did malware get into the mailboxes to start with?<\/h2>\n\n\n\n

      Many administrators are shocked when they see warning messages from BackupAssist 365 in the backup reports:<\/p>\n\n\n\n

      \u201cCannot save an attachment: An attachment was skipped because it has failed a virus scan.\u201d<\/em><\/p><\/blockquote>\n\n\n\n

      The common belief is that the hosted email provider \u2013 such as Office 365 \u2013 will scan mailboxes to prevent malware from getting into the mailbox (which is true \u2013 according to Microsoft\u2019s KB article on the topic<\/a>.)<\/p>\n\n\n\n

      Many of our clients also use a 3rd<\/sup> party email security gateway to filter out malware and spam. And these are remarkably effective and highly recommended by us.<\/p>\n\n\n\n

      However, there are still ways in which viruses and malware can get into your mailboxes.<\/p>\n\n\n\n

      1. Historically, there may have been times where an email security gateway was not used, and viruses \/ malware were free to enter.<\/li>
      2. If a security filter was used, but the virus \/ malware was not known at the time, it passes through the security filter and gets delivered to the mailbox. (This is a false negative.)<\/li>
      3. In a mailbox migration, emails are uploaded to the mailbox without ever having been delivered, so the security filter is bypassed altogether.<\/li>
      4. In the case of notes or calendar appointments, these can get saved straight to a mailbox using client-side software like Outlook. Historically, it\u2019s been possible to attach viruses to items and upload them to the mailbox.<\/li><\/ol>\n\n\n\n

        How does BackupAssist 365\u2019s safety feature solve the problem?<\/h2>\n\n\n\n

        BackupAssist 365 lets the in-built Windows Defender (and for older Operating Systems, Microsoft Security Essentials) scan attachments before saving them to the backup PST files.<\/p>\n\n\n\n

        It\u2019s a simple process.<\/p>\n\n\n\n

        1. BackupAssist 365 downloads mailbox items<\/li>
        2. It then downloads attachments for the mailbox items, and saves them to temp files on disk.<\/li>
        3. The virus scanner will scan these temp files and flag any problems.<\/li>
        4. BackupAssist 365 then opens the attachments to read them and save them to the backup PST file.<\/li><\/ol>\n\n\n\n

          If there are any problems detected with an attachment, then it\u2019s likely you\u2019ll see a notification from your virus scanner. If you happen to be logged in, you\u2019ll see something like this from Windows Defender:<\/p>\n\n\n\n

          \"A<\/a><\/figure><\/div>\n\n\n\n

          If a threat is found, then BackupAssist 365 will replace the flagged file with a simple text file, like this one. The file is renamed to add \u201c.txt\u201d to the end of it.<\/p>\n\n\n\n

          \"Graphical<\/a><\/figure><\/div>\n\n\n\n

          This replacement attachment is then attached to the original email, and it\u2019s saved to the backup. So now your backup looks like this:<\/p>\n\n\n\n

          \"Graphical<\/a><\/figure><\/div>\n\n\n\n

          Here\u2019s another example of another email containing malware, sanitized with BackupAssist 365:<\/p>\n\n\n\n

          \"Graphical<\/a><\/figure><\/div>\n\n\n\n

          Finally, we\u2019ll log this in the backup report. This means you\u2019ll see a notice like this:<\/p>\n\n\n\n

          \"Graphical<\/a><\/figure><\/div>\n\n\n\n

          You should only see this notification once, because after the item is saved into the backup PST file, it won\u2019t be downloaded again.<\/p>\n\n\n\n

          And that\u2019s how BackupAssist 365 keeps your mailbox backups clean.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

          \n\t\t\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t
          \n\t\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t
          \n\t\t\t\t\t
          \n\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t\t\t
          \n\t\t\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t
          \n\t\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t