McAfee WebShield SMTP 4.5 MR1a on mail1 at wonderware.com detected W32/Sobig.dam in attachment screensaver.scr from intended for and it was Deleted and Quarantined.