yes! that's exactly the way to go. implementing this simple attachment filtering rule cuts out all the garbage, even new viruses that are not recognized yet by the latest dat file.

on my exchange server i block the following attachments: .exe, .com, .bat, .vbs, .shs, .pif, .scr - al, you said you're doing the same thing, right?

of course, this is only one layer of many in the overall picture of antivirus protection. this does not protect against more sophisticated viruses like nimda or code red that spread via web sites and network shares.

Happy computing!

Alex "crazygerman" Byron
Webmaster, Editor-in-Chief
PC911