Can we not just get all email scanners....
To strip the last three characters from all attachments and default windows to open anything without and extension into a hex editor. Anyone that really needs the attachment will have to download and rename the file appropriately.
I know this would never fly with users..... :(
Biting the hand that feeds IT
