I am administrator of a Exchange 5.5/Nt4.0 and I use Norton Antivirus Enterprise Edition. I started getting messages every half an hour or so from the Antivirus,it is catching the W32.Ganda.A@mm.enc worn in the folder %\Exchangesrv\imcdata\in\ which I know is the temporary location of incoming emails. It also lists me as a user. Does this mean that the emails are being addressed to me? Also When I try to recover an infected file from Quarantine it just gives me the same information as the alerts. I would like to find out where these messages are coming from and why after 6 months all of the sudden I started getting these in the last couple of days. Thanks