1 Reply Latest reply on Nov 25, 2008 10:59 AM by rtjust

    McAfee 8.5i - Email Scan Alert -Suspicious Extensions "\3.OLE" but no virus found

      We are running McAfee 8.5i on workstations at the school district I support. Lately we have been seeing McAfee's Outlook Add-in pick up word, excel, etc documents as a threat but not because of what they contain. Strangely the files are sent with a .doc or .xls extension but they are being reported with having a .doc./3.OLE extension instead. This is triggering McAfee to quarantine the file. The files do not contain any viruses before or after sending. This is happening to multiple users.

      Here is an example Email Scan Alert:
      Attachment file : Weekly Admin. Report Nov.14 final.doc\3.OLE
      Scanner Detected: Suspicious Extensions (Virus)
      Action taken : Moved (Clean failed, file has multiple extensions)

      Another:
      Attachment file : Falcon Flyer Nov. 10.doc\3.OLE
      Scanner Detected: Suspicious Extensions (Virus) Action taken : Moved (Clean failed, file has multiple extensions)

      The adding of the "\3.OLE" seems to be taking place on the workstation because it happens with emails sent inside and outside of the organization.

      Also I have made sure that "Find attachments with multiple extensions" is disabled in the Email scan properties.

      Has anyone seen this before? It's quite annoying.