Antigen for Exchange found readme.exe infected with JScript/Nimda.A.Worm (CA(InoculateIT)) worm. The message is currently Purged. The message, "SANS NewsBites Vol. 3 Num. 38", was sent from The SANS Institute and was discovered in IMC Queues\Inbound located at ORGANIZATION/SITE-1/ALEXAPP001.
Greg
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm