Lately I have seen a rash of renaming files to "known" names so people will click on them.. Thank goodness for Symantec NAV which has caught it most everytime..