diff --git a/api/src/org/labkey/api/premium/AntiVirusService.java b/api/src/org/labkey/api/premium/AntiVirusService.java
index 20a31e5d897..5e15f09145e 100644
--- a/api/src/org/labkey/api/premium/AntiVirusService.java
+++ b/api/src/org/labkey/api/premium/AntiVirusService.java
@@ -35,6 +35,7 @@ public interface AntiVirusService
 {
     // NOTE purposefully this is not the same as the standard test file: ...EICAR-STANDARD-ANTIVIRUS-TEST-FILE...
     String TEST_VIRUS_CONTENT="X5O!P%@AP[4\\PZX54(P^)7CC)7}$LABKEY-ANTIVIRUS-TEST-FILE!$H+H*";
+    String MALICIOUS_FILE_ERROR_MESSAGE = "For security reasons, we did not upload this file. Please contact your internal IT or Information Security department for assistance in dealing with this potentially harmful file.";
 
     static @Nullable AntiVirusService get()
     {
diff --git a/core/src/org/labkey/core/webdav/DavController.java b/core/src/org/labkey/core/webdav/DavController.java
index 58c7bbb0112..6c680148437 100644
--- a/core/src/org/labkey/core/webdav/DavController.java
+++ b/core/src/org/labkey/core/webdav/DavController.java
@@ -3002,7 +3002,7 @@ public void closeInputStream() throws IOException
                 if (result.result == AntiVirusService.Result.CONFIGURATION_ERROR)
                     throw new ConfigurationException(result.message);
                 else
-                    throw new DavException(WebdavStatus.SC_BAD_REQUEST, result.message);
+                    throw new DavException(WebdavStatus.SC_BAD_REQUEST, result.message + ". " + AntiVirusService.MALICIOUS_FILE_ERROR_MESSAGE);
             }
         }