Joe.......Right on with the 'hold for scan' idea.
But, caution on the file extension part. It'll only tell you what it's PURPORTED to be. Example: I send you VIRUS.EXE, except before I attach it, I rename it to NOTVIRUS.TXT.
It's still the same program, and is still executable (although Notepad won't do much with it).