>No bad approach. IF it works. I will attempt to tell our people this. I say attempt because they dont take direction real well.

They can't possibly be worse than my IT people :) Maybe as bad...

But, you might also mention this generality also - disabling WSH did NOT stop Life Stages. The hackers will continue to find means to get some virus-vehicle attachments through - filtering the attachments is a much stronger remedy, I believe. It may not last a long time before hackers come up with some completely new technique, but for now it beats just going after WSH.