Joe.......

Right on with the 'hold for scan' idea.

But, caution on the file extension part. It'll only tell you what it's PURPORTED to be. Example: I send you VIRUS.EXE, except before I attach it, I rename it to NOTVIRUS.TXT.

It's still the same program, and is still executable (although Notepad won't do much with it).