Can anyone shed any light on the fact that there are
certain users in my company who receive 30+ email messages
per day stating they have tried to send an email that
could not be received or have had a message from so and so
which was quarintined. Whilst other network users only
receive one every 2 days or so?

How is the algorithm that proccess' the new victims e-mail
address worked out?
Would aaa@dom.com be more likely to be hit than
zzz@dom.com?

Or is aaa@dom.com just more unlucky if he is getting more
of these infected mails?

Cheers Boab