Symantec has reported that attackers are using the Windows Help file (.hlp) extension to infiltrate systems via social engineering. What is being exploited with the HLP files, and how can enterprises go about protecting users? At what point should these files be blocked?