There is a virus going around called W32/XDocCrypt.a that is causing havoc to Excel and Word files located on the network. This virus renames files to .scr.
If you do not have the latest cure and your files are stored on NetApp filers, you can prevent the virus from infecting your files by using the fpolicy tool on NetApp. The McAfee vscan for NetApp storage does not work very well.
On the NetApp filers,verify that fpolicy is enabled by issuing this command:
options fpolicy
If it’s not enabled, enable it:
options fpolicy.enable on
Then run the following commands:
fpolicy create scrblocker screenfpolicy ext inc set scrblocker scrfpolicy monitor set scrblocker -p cifs create,renamefpolicy options scrblocker rquired onfpolicy enable scrblocker -f
If you are using vfiler, create the above commands on the vfiler. Also, do not specify any volume, because it does not work.
The fpolicy tool can also be a great tool in blocking unwanted files on your filers such as mp3. For more information on fpolicy, go to this website.