>We now have taken away the option to let the user decide; anything that triggers the AV software is moved and someone who isn't clue-free gets notified that something got picked up. I'd rather get annoyed by a few false alarms than risk getting hit with something really nasty. We're now relying on McAfee's SecureCast to automagically get updates sent to the office as soon as they're released, and I'm working on getting SMS to automatically update systems at the next login.

That's what we do, auto-SMS updates. Once you get it working, it's great -- though you still have to deal with "lazy-logoff" users...

>The people who ought to be absolutely terrified are people whose work product is sensitive - the idea of a draft of a contract from my attorney's office being sent to the first 50 entries in his secretary's address book is truly frightening!

And with a list of porno-sites, to boot :)