Antigen for Exchange found Smoke.com infected with W32/Bagle-AA worm. The message is currently Purged. The message, "Encrypted document", was sent from Elektro and was discovered in SMTP Messages\Inbound And Outbound located at CHIPCAD/first administrative group/CHIPCADSBS.