Antigen for Exchange found Readme.scr infected with W32/Bagle-AA worm. The message is currently Purged. The message, "Encrypted document", was sent from Elektro and was discovered in SMTP Messages\Inbound And Outbound located at CHIPCAD/first administrative group/CHIPCADSBS.