Scan Attachments

[mlajoie]

Good morning.  We are starting to get a lot of blocks:

User ran C:\Program Files (x86)\Microsoft Office\Office15\OUTLOOK.EXE, which attempted to access C:\Users\User\AppData\Local\WebEx_OnPremise\WebEx\Meetings\atmgr.7z\atmgr.exe. The Potentially Unwanted Program named Susp Attachment!exe was detected and deleted.

This is a new PUP block for us -- we've had WebEx in the environment longer than we've had McAfee .

So.

As far as I can tell, there are no changes to any of the WebEx files.  

Please advise if there are any exclusions we can do?  I don't think there are but want to be sure.

[ryadav1]

Exclusions are added as per detection for PUP detection's .We would not recommend to have an exclusion here as it may block all PUP detection with the same name 

You may Uncheck the option Detect suspicious email attachments  from On-Access Scan policy.

Disabling this option will not effect the scanning of any attachment in outlook. Perhaps any read/write operation which performed from the machine , be it opening the attachment or saving the attachment on the local machine , McAfee will still detect and delete it irrespective of this option being enable or disabled.

Refer KB for Exclusion : https://kc.mcafee.com/corporate/index?page=content&id=KB87670