VirusScan Enterprise detects legitimate Outlook attachments with multiple extensions as infected

For McAfee VirusScan Enterprise 8.5 or 8.7


User receives email with subject line beginning with "McAfee Email Alert"

and message similar to following:

Attachment file : Spreadsheet 1.25.07.xls\1.OLE
Scanner Detected: Suspicious Extensions (Virus)
Action taken : Moved (Clean failed, file has multiple extensions)


  • change on-delivery email scanner policy
  1. In VirusScan Console, right click On-delivery email scanner, click Properties.
  2. In the Advanced tab, uncheck "find attachments with multiple extensions".
  3. Click Apply and OK.
  • restore the attachment that was moved to quarantine
  1. In VirusScan Console, right click Quarantine Manager Policy. Click Properties.
  2. In the Manager tab, right click the attachment filename. Click Restore.
  3. Click Yes to restore file and registry values.
Please rate the quality of this answer: Poor Fair Okay Good Excellent
Not the answer you were looking for? Try different keyword combinations and if you still can’t find your answer, please contact us.
Article ID: 682
Created: Thu, 25 Jan 2007 5:53pm
Modified: Thu, 16 Jun 2011 5:57pm