.bin files being embeeded into .xlsx attachments in emails

There are a number of extensions our mail filters block for inbound emails;, .exe, .bat...One of those extensions by default (in the program we us:  Symantec Mail Security for SMTP) is a .bin file.  

On two occasions, someone has sent us a .xlsx and a .bin file has been removed from the email and the spradsheet will not open.  I know I could just allow .bin files and it would work but what do you think is happening here?  Why is there a .bin file in the email and what does that have to do with the .xlsx spreadsheet?

Thanks in advance!
vianceadminAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Rory ArchibaldCommented:
bin files are created for macros and OLE objects embedded in the files. If it's definitely an .xlsx and not an .xlsm, then the bin file presumable relates to an embedded object, not a VBA project.
Regards,
Rory
vianceadminAuthor Commented:
Yes, it's definitely a .xlsx file.  So the .bin file is needed to open the spreadsheet?  The sender doesn't know that he's sending the .bin file...He's just sending the spreadsheet...
Rory ArchibaldCommented:
Do you know the name of the .bin file that is being removed? The .bin file will be part of the file - it's created automatically when he saves it as an .xlsx (which is effectively a zip file full of other files) - is he embedding any other files or objects in the workbook?
Rowby Goren Makes an Impact on Screen and Online

Learn about longtime user Rowby Goren and his great contributions to the site. We explore his method for posing questions that are likely to yield a solution, and take a look at how his career transformed from a Hollywood writer to a website entrepreneur.

vianceadminAuthor Commented:
xl/printerSettings/printerSettings1.bin

I believe that this is used in Office 2007 documents to compress the file (read that somewhere).  
Rory ArchibaldCommented:
Oh yes, I forgot about printer settings! Yes, they are always stored as bin files. There's quite a good list of things that can be included as bin files here:
http://www.codeproject.com/KB/cs/office2007bin.aspx
Regards,
Rory
PS You could probably tell your mail security to ignore xlsx files?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
vianceadminAuthor Commented:
The mail security is triggering on the .bin file not the .xlsx file.  Also found this:

Email Virus Scanner Quarantines Office 2007 Documents
When a user receives a Office 2007 documents saved in the Office OpenXML format (e.g. .docx, .xlsx, pptx) as an email attachment, occasional files may be quarantined or otherwise flagged as infected by an email antivirus program. This is caused by the virus scanner flagging the file because it contains a binary file (.bin).

The Office OpenXML format files are actually zip files which contain multiple files within them. Antivirus software may recognize them as such, unzip them, and analyze the contents individually. Among the files which an Office OpenXML document can contain are files such as oleObject1.bin (containing embedded OLE objects) or PrinterSettings1.bin (containing printer settings). These .bin files may cause the attachment to trigger a policy in the virus scanner which blocks executables or filters common executable extensions (.exe, .bin, .com, .bat, .pif, etc.).

Potential workarounds include turning off quarantining of executable attachments, allowing attachments with the .bin extension, or not scanning zips, but both of these are potentially too dangerous to seriously consider. Until the Office OpenXML format becomes more prevalent and/or the antivirus vendors find an intelligent solution to this issue, it may be easier to individually release these files from quarantine.

I don't really want to not scan .bin attachments but there doesn't seem to be much of a workaround...

Thanks for your help!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.