Exchange 2010 - mad.5131

Hi,

On the 1st Feb we had an exchange index file being repeatedly quarantined:

At least one security risk found:

Risk name: Mad.5131

File path: E:\Databases\Mailbox\***\CatalogData-e157586d-558b-4562-****-c0cf38e3980f-835a3dd2-374e-4856-****-72d844bbb6d3\00010001.ci

Event time: 2014-02-02 00:44:16 GMT

Database insert time: 2014-02-02 00:59:23 GMT

User: SYSTEM

Computer: ****

IP Address: ****

Domain: Default

Server: ****

Client Group: My Company\ - Servers Action taken on risk: Quarantined

This occured on on primary email server and our DAG Server the DAG is running SEP11 and the primary is running SEP12

It looks to be a false positive because it eventually stopped but I wanted to understand if these exchange content indexes should be scanned?

Thanks